TODO:

The external skill sources this organization vouches for. A project that sets organization: <org> sees these as candidate sources it may adopt — curation is not installation. The project still opts each one in by committing its pin to <project-config>/skill-sources.md.

Leave the list empty if the organization curates none; projects can still trust a source directly in their own skill-sources.md.

Curated sources

Each entry is a source descriptor. Declare only sources this organization stands behind for every project under it.

# - id: <source-id>                 # unique, kebab-case
#   organization: <org>            # must match this directory's name
#   name: "<human-readable name>"
#   maintainer: "<who>"
#   method: <git-tag | git-branch | svn-zip>
#   url: <repo or archive URL>
#   ref: <tag | branch | version>
#   # verification anchor: commit (git-tag) | sha512 (svn-zip)
#   layout:
#     skills_root: skills
#     evals_root: tools/skill-evals/evals
#   provides:
#     - skill: <name>
#     - family: <prefix>-*

Also add a row to the Org-curated sources table in docs/skill-sources/registry.md so the source is discoverable.