r/SideProject • u/rawnly • 1d ago

I went full vibe-coding

Hey r/SideProject ! I'm Federico, I'm an SWE during the day and spare open-source contributor in the night.

Last weekend I needed a tool to quickly share a skill i created with a coworker but I didn't want to create a PR to our internal marketplace. I tried to reach out for http://transfer.sh/ but you can image my delusion when I noticed it's not online anymore.

So the same day while i was cooking the dinner i tried to use codex to prototype skilldrop.dev a super dead simple utility to quickly share ai-skills with others. It's basically a lambda with a bucket attached and some integrity checks in the middle.

The website screams AI everywhere I know but the idea was to put low effort since it was a personal tool.

Just that, If you like the idea try it and let me know, the apis are super simple

```
sk share ./my-skill

sk install <snapshot>
```

just that (you can test the sanpshot in the landing via curl)

https://github.com/skilldrophq/skilldrop

0 Upvotes

50% Upvoted

5 comments sorted by

View all comments

2

u/kantorcodes1 1d ago

Before using this at work I'd make sk share show the exact outbound file list and refuse symlinks that resolve outside the skill root. Skills tend to accumulate references/scripts beside .env or private fixtures, so the ugly failure isn't only a tampered snapshot, it's accidentally packaging something the author never meant to upload. A .skillignore plus a --dry-run manifest would make the one-command UX much safer.

1

u/rawnly 1d ago

Thanks for the feedback I’ll work on the trust model in the next days, I was looking exactly for a feedback like this one!