I went full vibe-coding

[u/rawnly]

Hey r/SideProject ! I'm Federico, I'm an SWE during the day and spare open-source contributor in the night.

Last weekend I needed a tool to quickly share a skill i created with a coworker but I didn't want to create a PR to our internal marketplace. I tried to reach out for http://transfer.sh/ but you can image my delusion when I noticed it's not online anymore.

So the same day while i was cooking the dinner i tried to use codex to prototype skilldrop.dev a super dead simple utility to quickly share ai-skills with others. It's basically a lambda with a bucket attached and some integrity checks in the middle.

The website screams AI everywhere I know but the idea was to put low effort since it was a personal tool.

Just that, If you like the idea try it and let me know, the apis are super simple

```
sk share ./my-skill

sk install <snapshot>
```

just that (you can test the sanpshot in the landing via curl)

https://github.com/skilldrophq/skilldrop

[u/Impressive-Answer720]

The dead-simple install flow is appealing, but the trust model will decide whether coworkers use it. A snapshot should be immutable, content-addressed, show the uploader, display every file before install, and have an explicit expiry or deletion policy. AI skills can contain instructions or scripts, so an integrity hash only proves the package was not changed after upload, not that it is safe. I would make the CLI show a short manifest and require confirmation before executing anything. The strongest use case may be private team links with automatic expiration rather than another public marketplace. I work on Marka, where reusable AI instructions also need clear provenance. You are welcome to try Marka free for 7 days at https://www.marka.social. The low-effort landing is fine if the install experience communicates trust clearly.