Find and load installed skills. Pass name for an exact skill, or query to search and load the best match while returning alternates. Set include_resources to inline packaged resource/bin file contents; otherwise resources are returned as metadata only. Pass agent to render the generated variant with matching AutoVault transforms applied.

Add a known skill from a source. For GitHub, agentskills, and URL sources, pass source plus identifier; remote bytes are fetched and validated before storage. Remote skills without agents frontmatter need target_agents for profile sync, or sync_profiles: false for vault-only install. For local bundles, pass source: "local" and skill_dir; identifier can override local provenance like CLI add-local --source, otherwise the normalized bundle root is recorded. Caller-authored SKILL.md bytes should use propose_skill, not add_skill.

Submit a newly authored SKILL.md to AutoVault. Runs validation, security scan, capability cross-check, and three-tier deduplication (exact content hash → near-exact similarity → functional overlap). Use when the user asks to save a conversationally created skill, or after you've drafted one in response to a workflow the user wants reused. Always prefer this over writing skill files directly to disk.

Import every immediate child directory under source_dir that contains a SKILL.md. Each child is validated and deduped like propose_skill; agents fills missing agents frontmatter for migration bundles, resources can be inferred from bundled files, and profile sync runs once at the end. Returns compact sync counts by default; pass verbose: true for full per-profile sync detail.

Update an installed skill. With only name, AutoVault refreshes the recorded GitHub/agentskills/URL source. To update from a new source, pass source and identifier; to update from a local bundle, pass source: "local", skill_dir, and identifier; to explicitly replace from caller-held bytes, pass source: "inline" and skill_md. For SKILL.md-only inline edits, pass reuse_existing_resources: true to validate against the currently installed signed resources. Updates return compact sync counts by default; pass verbose: true for full sync detail. Updates refuse candidates whose frontmatter name does not match name.

Delete an installed skill from the vault and refresh generated profiles. Existing host skill roots are discovered by default so managed consumer links are pruned; pass discover_profile_roots: false to opt out. This also removes vault-local transforms for that skill.

Detect upstream drift for skills installed from github, agentskills, url, or bundled inline sources. Compares each skill's stored content hash against the current source state. Non-bundled inline skills are reported as unchecked.