The problem: as I accumulated skills across projects, I found myself manually copying files between repos with no way to track versions or share updates reliably.

ArteSync treats any public GitHub path as an installable source and locks it to a commit hash, similar to how npm/Cargo handle dependencies:

arsync install myorg/myrepo/skills/my-skill#main

This fetches the files, writes a skills.arsync manifest, and generates a skills-lock.arsync lockfile (commit-pinned). Running arsync install with no arguments does a hard checkout to the exact hashes in the lockfile—so teams get reproducible skill environments. arsync update checks for upstream changes and rewrites the lock.

It's early and experimental (breaking changes possible), but it's usable:

  npm install -g artesync