External-repository intake

When the user asks to "import", "pull", "vendor", "cherry-pick", or "borrow from" an external GitHub repository (anything not already registered in the sync table of the upstream-sync skill), follow this workflow before touching any local file. This skill covers the first intake. Re-syncing repositories already registered uses the separate upstream-sync skill.

1. Classify the operation

The intake mode is vendoring: a one-shot or tracked copy of upstream content into a neutral kernel, with attribution preserved and content adapted to our conventions. It creates no fork or submodule. Runtime dependencies remain explicit plugin.toml declarations: a runtime reference to another local plugin requires that plugin in [dependencies].required; local optional dependencies and generic fallbacks for missing required plugins are forbidden.

Local source lives under plugins/<name>/: plugin.toml, roles/, workflows/ with TOML sidecars, skills/, contracts/ and policies/. Host bindings live in adapters/. Native package copies under exports/ and root catalogs are generated.