for orgs with proprietary security skills, where do they live?

the public security skills here are useful as a starting point. what we hit pretty fast on our side is that most of our actually-valuable security work is internal (red-team playbooks, custom audit checklists, compliance flows) and can't live in a public repo.

curious how teams in this space are handling that. patterns we've explored:

• private git repos symlinked into ~/.claude/skills/
• a self-hosted registry that mirrors to disk (we ended up building skillnote for this, mit — github.com/luna-prompts/skillnote)
• separate "public + private" claude profiles

would be useful to have a short doc-pointer for that side of the workflow, even outside this repo's main scope. curious what trail of bits internally recommends.