devops by ellmos-ai
piggyback-hosting ellmos-ai/piggyback-hosting
Hosting pattern for turning a locally-built application (own database, own API key, in-process state) into a safely hosted one without building user management. Core move — the host stores nothing, the visitor's browser stores everything — so per-visitor accounts, access checks and deletion deadlines become moot instead of needing to be solved. Use when a locally-built app is about to be hosted for multiple visitors, when asked to "make this hostable without a login", "avoid building user accoun
Install linked skill Links this skill to your agents and keeps it current with the author's updates.
Fork editable copy Install locally · CLI or SKILL.md 1 · One-time — install the CLI (
docs ↗ )
$ pip install decimalaiCopy
2 · Get the skill — writes .claude/skills/ellmos-ai-piggyback-hosting/SKILL.md
$ decimalai skills pull ellmos-ai-piggyback-hosting --out .claude/skills/Copy
Copy link Copy README badge Copy SKILL.md No CLI? Get the same file — curl · raw file $ curl -fsSL --create-dirs -o .claude/skills/ellmos-ai-piggyback-hosting/SKILL.md https://app.decimal.ai/s/ellmos-ai-piggyback-hosting/SKILL.mdCopy
Code scan Clean Intent Passed Content Clean
Overview Benchmark Contents Activity Versions 2 Ratings 0
Benchmark snapshot Same tasks, with and without this skill.
View full report → Model gemini-3.6-flashMeasured 8/28/2026 v2
Pass-rate lift +45 pp percentage-point change
Pass rate with skill 86% 41% without skill
Tokens +38% vs. without skill
Agent turns 0% vs. without skill Usage All-time distinct users and times used, across every version.
View activity → Read the skill SKILL.md and 3 supporting files
Open contents → Safety and source details
SkillSafety ✓ 3 of 3 passed ✓ Code scan 15 of 15 checks clean
0 critical · 0 warning · 0 info — scanner v5 — 8/16/2026
View 15 scanner checks live_secret remote_code_execution reverse_shell data_exfiltration ssrf_metadata agent_snooping anti_refusal destructive_commands obfuscated_unicode unicode_homoglyph opaque_blob suspicious_url tool_overreach trigger_abuse prompt_injection_phrasing
✓ Intent Safe
LLM judge · does the skill do what it claims
✓ Content Clean
LLM judge · policy & harmful-content review
Source Imported License MITImported 8/24/2026Version v2Bundled 3 files