YHacker News
Show HN: Skrun – Deploy any agent skill as an API(github.com)
62 points by frizull 6 days ago | hide | 12 comments
frizull6 days ago | | | parent | | on: 47689319
Hey HN.

My colleague built this because he wanted to use his skills outside of Claude Code.

With this project you can expose your skills as an API endpoint in under 2 minutes.

If you could have a look at the repo and give your feedback, it would be much appreciated.

Thanks!

jonnycoder6 days ago | | | parent | | on: 47689324
This is clever and provides a clean alternative to using custom plugins and mcp servers for doing code reviews.

For example, with the degradation of Claude in the past 1-2 months, I am always asking Codex to review Claude's plans and vice versa and I get excellent results that way.

Also, making a skill an API call allows for easy deployment if the security around tool calling could be isolated in an ephemeral sandbox.

Tarcroi6 days ago | | | parent | | on: 47695646
Thanks! Sandbox deployment is planned in the roadmap. I already have a RuntimeAdapter interface in my architecture that I'll use to isolate the VMs. I'm doing exactly the same thing: I'm cross-referencing the models to challenge their plan, and my code reviewer agent's API is a big help.
sergioisidoro6 days ago | | | parent | | on: 47689319
This looks like a security nightmare in case someone decides to publish this interface publicly. Prompt injection to exfiltrate sensitive Information being on the top of the list.
Tarcroi6 days ago | | | parent | | on: 47696433
You're right. For now, it's only local. For a public deployment, the idea is to have sandboxes and verification steps. That won't completely eliminate the risk of prompt injection, but so far no solution has managed to completely resolve this problem.
7777777phil5 days ago | | | parent | | on: 47689319
Auto-switching across model providers basically concedes the model layer is commodity, which I think is right (1)

tbd whether the skill registry develops network effects or just stays a flat directory. Portable skills as APIs tracks with the broader pattern of agent stacks decomposing into specialized swappable layers, where the defensible asset is whatever process knowledge orgs encode, not the deployment infra.

(1) wrote about it here from an enterprise perspective: https://philippdubach.com/posts/dont-go-monolithic-the-agent...

Tarcroi5 days ago | | | parent | | on: 47704009
I agree on the commodity point, that's why I went multi-model from start.

The registry question is the one I'm thinking about the most. Right now it's flat. I plan to integrate usage data (success rates, cost, trust scores). So the registry tells you which skills actually work well, and that's valuable.

Your article looks interesting, I'll read it.

rohitghumare4 days ago | | | parent | | on: 47689319
https://Skillkit.sh already does this by default and ranked #3 on Product Hunt.
Tarcroi4 days ago | | | parent | | on: 47715319
Different thing. SkillKit distributes skills to agents. Skrun runs them as APIs.