Skills xdrop

Use this skill when the user wants to send or fetch files through an Xdrop server from the terminal, asks to automate encrypted Xdrop share-link workflows, provides an Xdrop `/t/:transferId#k=...` link to download and decrypt locally, or needs Xdrop CLI flags such as `--quiet`, `--json`, `--expires-in`, `--output`, or `--api-url`, even if they do not explicitly mention the skill name.

install

source · Clone the upstream repo

git clone https://github.com/xixu-me/skills

Claude Code · Install into ~/.claude/skills/

T=$(mktemp -d) && git clone --depth=1 https://github.com/xixu-me/skills "$T" && mkdir -p ~/.claude/skills && cp -r "$T/skills/xdrop" ~/.claude/skills/xixu-me-skills-xdrop && rm -rf "$T"

manifest: skills/xdrop/SKILL.md

source content

Use the bundled scripts inside this skill directory.

Available scripts

```
scripts/upload.mjs
```
— Upload local files or directories to an Xdrop server and print the share link
```
scripts/download.mjs
```
— Download an Xdrop share link, decrypt it locally, and save the files

Environment requirements:

Bun
Local filesystem access
Network access to the target Xdrop server

Upload

bun scripts/upload.mjs --server <xdrop-site-url> <file-or-directory> [...]

Prefer these flags when relevant:

```
--quiet
```
: suppress progress output and keep stdout clean
```
--json
```
: return
```
transferId
```
,
```
shareUrl
```
, and
```
expiresAt
```
```
--expires-in <seconds>
```
: choose a supported expiry
```
--api-url <url>
```
: override the default
```
<server>/api/v1
```
```
--name <value>
```
: set the transfer display name
```
--concurrency <n>
```
: limit parallel uploads per file

Useful examples:

bun scripts/upload.mjs --server http://localhost:8080 ./dist/report.pdf
bun scripts/upload.mjs --server http://localhost:8080 --quiet ./archive.zip
bun scripts/upload.mjs --server http://localhost:8080 --expires-in 600 --json ./notes.txt

If the user wants verification, upload a small temporary file and then confirm the public transfer API or browser can open the returned link.

Download

Require the full share link, including

#k=...

. Without the fragment key, the transfer cannot be decrypted.

bun scripts/download.mjs "<share-url>"

Prefer these flags when relevant:

```
--output <dir>
```
: choose the destination directory
```
--quiet
```
: suppress progress output and keep stdout clean
```
--json
```
: return
```
transferId
```
,
```
outputRoot
```
, and saved file paths
```
--api-url <url>
```
: override the default
```
<share-origin>/api/v1
```

Useful examples:

bun scripts/download.mjs "http://localhost:8080/t/abc123#k=..."
bun scripts/download.mjs --output ./downloads "http://localhost:8080/t/abc123#k=..."
bun scripts/download.mjs --quiet --json --output ./downloads "http://localhost:8080/t/abc123#k=..."

By default the downloader writes to

./xdrop-<transferId>

and preserves the manifest's relative paths.

Gotchas

A download link without the
```
#k=...
```
fragment is not decryptable. Ask for the full original share URL.
Use
```
--quiet
```
whenever another command or caller needs to capture stdout. Progress logs otherwise go to stderr, but the final result still matters.

Guardrails

Prefer
```
--quiet
```
when another command or script needs to capture stdout.
Keep the full share link fragment intact for downloads.
Do not bypass the scripts' built-in path sanitization or transfer cleanup behavior with manual ad hoc commands unless the user explicitly asks.