Show HN: Skrun – Deploy any agent skill as an API

Two devs dropped Skrun, an open‑source tool that turns an AI “skill” (basically a how‑to file) into a one‑click web API in minutes. It runs locally today, promises cloud later, and even swaps between models from OpenAI, Google, Anthropic and more. Think: your code‑review or SEO‑audit bot, now callable by a simple web request. The repo is MIT‑licensed and comes with demo agents and a plug‑and‑play CLI.

Then came the comments. The launch duo, frizull and colleague Tarcroi, asked for feedback — and got a firehose. The loudest alarm? Security. One top reply called it a “security nightmare,” warning that prompt injection (tricking the AI into spilling secrets) could wreck anyone who exposes this publicly. Another big take: if Skrun auto‑switches between AI providers, then, as one commenter put it, the model is a commodity — the real value is your process and data, not the chatbot brand. And cue the clone war: a drive‑by link to Skillkit claimed “already does this,” igniting the usual “who shipped first” debate. Amid the drama, some readers liked the simple “POST /run” approach and the memory‑across‑runs feature — while others joked this is how you speedrun a security incident. It’s equal parts power‑tool and panic button, which is exactly why HN can’t look away.