# Dropbox Skill

> Upload files to Dropbox, download from Dropbox, and create or reuse shared links. Use when the user mentions Dropbox, asks to upload/download/share a file via Dropbox, or wants a shareable link for a file already in Dropbox.

- **Type:** Skill
- **Install:** `agentstack add skill-axect-dropbox-skill-dropbox-skill`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Axect](https://agentstack.voostack.com/s/axect)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Axect](https://github.com/Axect)
- **Source:** https://github.com/Axect/dropbox-skill

## Install

```sh
agentstack add skill-axect-dropbox-skill-dropbox-skill
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# dropbox-skill

Dropbox file operations via Dropbox HTTP API v2. Unifies upload, download, and shared-link operations.

## Trigger conditions

Invoke this skill when the user says any of:
- "upload X to Dropbox" → use `scripts/upload.sh`
- "download X from Dropbox" / "get X from Dropbox" → `scripts/download.sh`
- "share link", "shared link", "Dropbox link", "make a link for X" → `scripts/share.sh`
- "set up Dropbox", "configure Dropbox", or when `~/.config/dropbox-skill/credentials.json` does not exist → `scripts/setup.sh`

## Prerequisites (check before any operation)

Before running upload/download/share, verify the credentials file exists:

    test -f ~/.config/dropbox-skill/credentials.json

If it does not exist, tell the user:
> Dropbox is not set up yet. I can run the setup flow — it will ask for your app key, app secret, and an authorization code from a browser URL. Proceed?

Only run `setup.sh` after the user confirms.

## Path rules

- Dropbox paths MUST start with `/` (e.g. `/Papers/draft.pdf`). Reject relative paths.
- If the user gives a bare filename (e.g. "report.pdf"), ask which Dropbox folder before acting.

## Script usage

All scripts live in this skill directory's `scripts/` folder. If your client exposes the skill directory path (for example Claude Code via `CLAUDE_SKILL_DIR`), use it. Otherwise resolve the script path relative to this `SKILL.md` file.

### setup.sh
Interactive one-time bootstrap. Takes stdin input for app key, app secret, and authorization code.

    bash scripts/setup.sh

### upload.sh
Upload local → Dropbox. Auto-chooses single-shot vs chunked session based on file size.

    bash scripts/upload.sh  

Prints a one-line JSON summary on success: `{"path":"...","size":N,"content_hash":"..."}`

### download.sh
Download Dropbox → local. Refuses to overwrite existing local files.

    bash scripts/download.sh  []

If `` is omitted, uses `basename ` in the current directory.
Prints the saved path on stdout.

### share.sh
Create (or retrieve existing) shared link.

    bash scripts/share.sh 

Prints the URL on stdout.

## Error handling

If any script exits non-zero, show its stderr to the user verbatim. Do not retry auth errors automatically (exit codes 2 and 3) — surface them so the user can re-run setup.

Exit code reference:
- 0 — success
- 1 — bad argument or local filesystem error
- 2 — credentials.json missing (→ user should run setup.sh)
- 3 — refresh token rejected (→ user should re-run setup.sh)
- 4 — Dropbox path not found
- 5 — other API error
- 64 — usage error
- 127 — missing dependency (curl/jq)

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Axect](https://github.com/Axect)
- **Source:** [Axect/dropbox-skill](https://github.com/Axect/dropbox-skill)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-axect-dropbox-skill-dropbox-skill
- Seller: https://agentstack.voostack.com/s/axect
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.