alt.hn

4/8/2026 at 12:34:38 PM

Show HN: Skrun – Deploy any agent skill as an API

https://github.com/skrun-dev/skrun

by frizull

4/8/2026 at 9:20:01 PM

This looks like a security nightmare in case someone decides to publish this interface publicly. Prompt injection to exfiltrate sensitive Information being on the top of the list.

by sergioisidoro

4/8/2026 at 9:48:36 PM

You're right. For now, it's only local. For a public deployment, the idea is to have sandboxes and verification steps. That won't completely eliminate the risk of prompt injection, but so far no solution has managed to completely resolve this problem.

by Tarcroi

4/9/2026 at 1:05:03 AM

[dead]

by Sim-In-Silico

4/8/2026 at 12:35:10 PM

Hey HN.

My colleague built this because he wanted to use his skills outside of Claude Code.

With this project you can expose your skills as an API endpoint in under 2 minutes.

If you could have a look at the repo and give your feedback, it would be much appreciated.

Thanks!

by frizull

4/8/2026 at 8:10:39 PM

This is clever and provides a clean alternative to using custom plugins and mcp servers for doing code reviews.

For example, with the degradation of Claude in the past 1-2 months, I am always asking Codex to review Claude's plans and vice versa and I get excellent results that way.

Also, making a skill an API call allows for easy deployment if the security around tool calling could be isolated in an ephemeral sandbox.

by jonnycoder

4/8/2026 at 9:24:55 PM

Thanks! Sandbox deployment is planned in the roadmap. I already have a RuntimeAdapter interface in my architecture that I'll use to isolate the VMs. I'm doing exactly the same thing: I'm cross-referencing the models to challenge their plan, and my code reviewer agent's API is a big help.

by Tarcroi

4/8/2026 at 12:39:05 PM

sounds interesting, lets me test the skills I created and collected over the last few months

by senthilnayagam

4/8/2026 at 12:50:30 PM

Hi, I'm the "colleague", Impatient to have your feedback!

by Tarcroi

4/8/2026 at 9:37:27 PM

Thanks for sharing a cool project! Just fyi, more idiomatic English would be "eager to have your feedback" since "impatient" implies frustration.

by hmartin

4/8/2026 at 9:56:23 PM

Ha, thanks for the correction! I'll remember that!

by Tarcroi

4/8/2026 at 11:08:33 PM

[dead]

by midasoperator