Hacker News: alierfan

Show HN: Skilldeck – Desktop app to manage AI agent skill files across tools

alierfan — Fri, 10 Apr 2026 15:14:35 +0000

Skill files (.claude/skills/, .cursor/rules/*.mdc, AGENTS.md, .windsurfrules) are becoming a core part of AI-assisted development workflows. The problem: they scatter across projects, diverge silently, and every new repo means rebuilding behavioral config from scratch. Each tool uses a different format and location.

Skilldeck keeps one local library and deploys to any tool in the correct format automatically. Ten built-in target profiles cover Claude Code, Cursor, Copilot, Windsurf, Codex, and more. Drift detection shows when a deployed skill has fallen out of sync with the library version. Bidirectional sync lets you pull improvements back from a project into the library.

The interesting part technically: the entire app was built by Claude Code using a harness engineering methodology — a ground truth JSON file, Playwright E2E verification tests, a regression gate based on a surfaces map, and a feature intake protocol. 31 features across multiple autonomous sessions with no manual application code. I wrote two articles about the harness approach if that side is interesting.

No cloud, no backend, local filesystem only. Windows/macOS/Linux. Open source.

github.com/ali-erfan-dev/skilldeck

Comments URL: https://news.ycombinator.com/item?id=47719403

Points: 1

# Comments: 0

New comment by alierfan in "How the Trivy supply chain attack harvested credentials from secrets managers"

alierfan — Fri, 10 Apr 2026 03:12:45 +0000

The technical breakdown of the Trivy attack is a great reminder that our security is only as strong as our version pinning. We all know we should pin to SHA-256 hashes instead of mutable tags, but the UX for managing and updating those hashes is still painful enough that most teams default to tags. Until the tooling makes 'doing the right thing' as easy as @v1, these supply chain leaks will continue to be a high-ROI path for attackers.

New comment by alierfan in "I still prefer MCP over skills"

alierfan — Fri, 10 Apr 2026 02:54:35 +0000

This isn't a zero-sum game or a choice of one over the other. They solve different layers of the developer experience: MCP provides a standardized, portable interface for external data/tools (the infrastructure), while Skills offer project-specific, high-level behavioral context (the orchestration). A robust workflow uses MCP to ensure tool reliability and Skills to define when and how to deploy those tools.