- name
- xdrop
- description
- Use this skill when the user wants to send or fetch files through an Xdrop server from the terminal, asks to automate encrypted Xdrop share-link workflows, provides an Xdrop
/t/:transferId#k=...link to download and decrypt locally, or needs Xdrop CLI flags such as--quiet,--json,--expires-in,--output, or--api-url, even if they do not explicitly mention the skill name.
Xdrop
Use the bundled scripts inside this skill directory.
Available scripts
scripts/upload.mjs— Upload local files or directories to an Xdrop server and print the share linkscripts/download.mjs— Download an Xdrop share link, decrypt it locally, and save the files
Environment requirements:
- Bun
- Local filesystem access
- Network access to the target Xdrop server
Upload
bun scripts/upload.mjs --server <xdrop-site-url> <file-or-directory> [...]Prefer these flags when relevant:
--quiet: suppress progress output and keep stdout clean--json: returntransferId,shareUrl, andexpiresAt--expires-in <seconds>: choose a supported expiry--api-url <url>: override the default<server>/api/v1--name <value>: set the transfer display name--concurrency <n>: limit parallel uploads per file
Useful examples:
bun scripts/upload.mjs --server http://localhost:8080 ./dist/report.pdf
bun scripts/upload.mjs --server http://localhost:8080 --quiet ./archive.zip
bun scripts/upload.mjs --server http://localhost:8080 --expires-in 600 --json ./notes.txtIf the user wants verification, upload a small temporary file and then confirm the public transfer API or browser can open the returned link.
Download
Require the full share link, including #k=.... Without the fragment key, the transfer cannot be decrypted.
bun scripts/download.mjs "<share-url>"Prefer these flags when relevant:
--output <dir>: choose the destination directory--quiet: suppress progress output and keep stdout clean--json: returntransferId,outputRoot, and saved file paths--api-url <url>: override the default<share-origin>/api/v1
Useful examples:
bun scripts/download.mjs "http://localhost:8080/t/abc123#k=..."
bun scripts/download.mjs --output ./downloads "http://localhost:8080/t/abc123#k=..."
bun scripts/download.mjs --quiet --json --output ./downloads "http://localhost:8080/t/abc123#k=..."By default the downloader writes to ./xdrop-<transferId> and preserves the manifest's relative paths.
Gotchas
- A download link without the
#k=...fragment is not decryptable. Ask for the full original share URL. - Use
--quietwhenever another command or caller needs to capture stdout. Progress logs otherwise go to stderr, but the final result still matters.
Guardrails
- Prefer
--quietwhen another command or script needs to capture stdout. - Keep the full share link fragment intact for downloads.
- Do not bypass the scripts' built-in path sanitization or transfer cleanup behavior with manual ad hoc commands unless the user explicitly asks.