drop-files-skill

intent

upload html or markdown content to dropfiles and return a public shareable link. invoke this when the user wants to share, publish, or generate a public url for any html or markdown content they produced. the service is free, globally accessible, and hosted on cloudflare's edge network. use this skill anytime the user needs to distribute a document, report, page, or text-based artifact they just generated.

inputs

external connection: dropfiles api endpoint

• base url: https://dropfiles.tokendealhub.com
• upload endpoint: POST /api/v1/upload
• requires: network access to dropfiles.tokendealhub.com
• note: api is behind cloudflare waf; curl is the only reliably working http client. python urllib, node fetch, and other clients will be blocked with http 403 (cloudflare error 1010).

required parameters:

• content (string): the html or markdown text to upload. max 5mb (utf-8 bytes).

optional parameters:

• type (string): html, markdown, or auto (default: auto). auto-detection treats content with <html or <!doctype as html, otherwise markdown.
• expire (string): 1h, 1d, 7d, or 30d (default: 7d).
• title (string): optional title shown on the share page.
• password (string): optional password to protect the share page. see decision points for password logic.
• lang (string): en, zh, or auto (default: auto).

context needed:

• the html or markdown content to upload (either freshly generated or provided by the user).
• any user preferences for expiry, title, password protection, or language.

procedure

1. confirm content. ask the user if needed: "what content do you want to share?" if the user just generated a document, use that content directly. do not proceed without content.

2. determine type. if the user specifies html or markdown, use that. otherwise default to auto and let the server detect (html if content contains <html or <!doctype, else markdown).

3. determine expiry. ask the user: "how long should this link stay active?" default to 7d if they don't specify. accept 1h, 1d, 7d, or 30d only.

4. determine title. ask the user: "should the share page have a title?" this is optional. set title only if the user provides one.

5. determine password mode (see decision points section below). confirm with the user before proceeding.

6. build the json payload. create a json object with:

   • content: the html or markdown text.
   • type: the detected or user-specified type.
   • expire: the expiry value.
   • title: the title (omit if not provided).
   • password: the password (omit entirely if no protection).
   • lang: language preference (optional, omit if not specified).

7. send upload request via curl.

   • if content is small (< 2kb) and has no special characters (quotes, backslashes, html tags): inline the json directly in curl -d '{"content":"..."}' https://dropfiles.tokendealhub.com/api/v1/upload.
   • if content is large (>= 2kb) or contains special characters: write the json payload to a temp file using python or shell, then send curl -X POST https://dropfiles.tokendealhub.com/api/v1/upload -H "Content-Type: application/json" -d @/tmp/dropfiles_payload.json. clean up the temp file after the request completes (rm /tmp/dropfiles_payload.json).
   • always include header: Content-Type: application/json.
   • always use curl; do not use python urllib, node fetch, or other http clients.

8. parse response. check the http status code.

   • on http 201: success. extract data.url, data.preview_url, data.expire_at, and data.id from the response.
   • on http 400/404/429/500: error. extract error.code and error.message. surface the message to the user and suggest fixes (see error codes below).

9. communicate result to user.

   • on success: provide the public url. example: "your share link is: https://dropfiles.tokendealhub.com/v/abc123def456". if a password was generated by the skill, prominently display it separately: "generated password: 482917. share this with viewers so they can access the page."
   • on error: explain the error and suggest a fix. example: "content exceeds 5mb. try uploading a smaller file."

decision points

password protection logic:

• if the user does not mention password protection at all: omit the password field entirely (default: no password, public link).
• if the user explicitly provides a password: include password with the user-supplied value.
• if the user asks for password protection but does not provide a specific password: generate a random 6-digit numeric string (e.g. "482917", exactly 6 digits 0-9, no letters or symbols) and include password with that generated value. prominently display the generated password to the user so they can share it with viewers.

content size handling:

• if content is < 2kb and has no special characters (quotes, backslashes, html tags): inline json in curl command.
• if content is >= 2kb or contains special characters: write json to temp file and use curl -d @/tmp/dropfiles_payload.json.

type auto-detection:

• if user specifies type (html or markdown): use that value.
• if user does not specify: set type: "auto" and let the server detect (html if content contains <html or <!doctype case-insensitive, else markdown).

network and rate limit errors:

• if RATE_LIMIT_EXCEEDED is returned: wait a moment and suggest the user retry. do not immediately retry on behalf of the user.
• if a network timeout or connection error occurs: inform the user and suggest retrying or checking network connectivity.

cloudflare waf blocking:

• if curl returns http 403 with cloudflare error code 1010: this means a non-curl http client was used. switch to curl immediately. never use python urllib or node fetch for this skill.

output contract

on success (http 201): return a json response (or plaintext summary) containing:

• url (string): the public shareable link, e.g. https://dropfiles.tokendealhub.com/v/abc123def456.
• preview_url (string, optional): the preview-only link if relevant, e.g. https://dropfiles.tokendealhub.com/v/abc123def456?preview=1.
• expire_at (string): iso 8601 timestamp when the link expires, e.g. 2026-07-22T10:30:00.000Z.
• type (string): the content type used (html or markdown).
• size (integer): the size of the uploaded content in bytes.
• id (string): the unique identifier for this upload.
• generated_password (string, optional): if a password was generated, include it here and display it prominently to the user.

on error (http 400/404/429/500): return the error.code and error.message from the api, e.g.:

{
  "success": false,
  "error": {
    "code": "CONTENT_TOO_LARGE",
    "message": "content exceeds 5mb"
  }
}

outcome signal

the user knows the skill worked when:

• they receive a public url they can click or share immediately.
• if password protection was used, they also receive the password (generated or user-supplied) clearly displayed.
• they can open the url in a browser and see the content rendered (html rendered as-is, markdown rendered with github-like styling).
• the response confirms the expiry date/time so they know how long the link will remain active.
• on error, they receive a clear explanation of what went wrong and how to fix it (e.g. "content too large, reduce file size").