skill-importerlisted

# skill-importer **Purpose.** Pull a skill from the user's broader skill directory (e.g. `~/.claude/skills/`, `~/.codex/skills/`, a sibling project, or a public skill repo) into this Zeref OS project. The import is provenance-tracked and does **not** auto-activate the skill — the user reviews it via `/review-skill` first. ## Activation This skill is the destination side of "adaptivity". When the user says "import skill X from my Claude directory", `skill-router` routes here. ## Steps 1. **Locate.** Search known skill roots: - `~/.claude/skills/` - `~/.codex/skills/` - `~/.cursor/skills/` - Any operator-configured skill vault path. - Any path explicitly named by the user. 2. **Read source.** Load `SKILL.md` and any sibling files (`PROVENANCE.md`, reference docs). 3. **Hash.** Compute SHA-256 of the source `SKILL.md` for tamper detection later. 4. **Privacy filter.** Run `privacy-guardian` over the source. If the source contains credentials, paths, or PII per `REDACT.md`, abort and surface to user. Never import a skill that itself contains secrets. 5. **Stage.** Copy to `skills/<name>/SKILL.md` with a new YAML frontmatter field: ```yaml imported_from: ~/.claude/skills/<name> imported_at: <iso-date> imported_sha256: <hex> activation: pending-review # NOT active ``` 6. **Write `skills/<name>/PROVENANCE.md`** with: source path, source project, original author (if known), import date, source SHA-256. 7. **Append to `zeref-