skills.rest
binary16labs
binary16labsCOMMUNITY
Explore all skills by this author →
GitHub

App Files And APIs

Access app files and backend endpoints through permission-aware space.api helpers.

5|Updated May 6, 2026
Search Tags:#frontend#browser security#workspace#git history#file api#permissioning#logical paths
One-click install
npx skills add https://github.com/binary16labs/prime-silo --skill app-files-and-apis-binary16labs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: App Files And APIs
Source: https://github.com/binary16labs/prime-silo/tree/main/app/L0/_all/mod/_core/skillset/ext/skills/development/app-files-apis
Command: npx skills add https://github.com/binary16labs/prime-silo --skill app-files-and-apis-binary16labs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It prevents frontend code from guessing paths and breaking permission rules by guiding authenticated, permission-aware access to app files and backend endpoints.

Core Features & Use Cases

  • Frontend API surface via space.api: Read and write app files, manage folders (download URLs), call backend endpoints, and inspect Git history when enabled.
  • Permission-aware discovery and access control: Find files via indexed, shard-scoped discovery (file_paths) instead of enumerating in-browser paths; restrict to writable areas when needed.
  • Safe logical path and storage boundaries: Enforce correct logical app-rooted paths, block .git metadata, and keep browser storage non-authoritative while placing durable state in app files or explicit APIs.

Use it when a browser-based UI must load configuration or module metadata, search for matching assets by pattern, update user/group state in allowed layers, or trigger secure backend operations without violating determinism and signing boundaries.

Quick Start

Ask the assistant how to call space.api.fileList and space.api.fileRead to discover and load a permission-safe set of matching app files under L2 for the current user, then apply the recommended write approach (replace vs append/insert) when updating them.

Frequently Asked Questions about App Files And APIs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I safely access app files from the browser without breaking permission rules?▼

To safely access app files from the browser, use space.api helpers like fileRead and fileList to ensure permission-aware discovery and access. This prevents frontend code from guessing paths and violating access or writableOnly rules.

How do I discover and read app files by pattern in a browser-based UI?▼

Discover and read app files by pattern using space.api.fileList for indexed, shard-scoped discovery and space.api.fileRead to load content. This method restricts access to permission-safe, matching app files under logical app-rooted paths.

What is the best way to prevent frontend code from accessing restricted .git metadata?▼

Preventing frontend access to restricted .git metadata requires using logical path conventions that explicitly block .git directories. This enforces safe storage boundaries and keeps browser storage non-authoritative while securing durable state in app files.

Can I trigger folder downloads and inspect Git history from frontend features?▼

Yes, you can trigger folder downloads via file_* methods and inspect Git history when the CUSTOMWARE_GIT_HISTORY flag is enabled. This allows frontend features to manage folders and review workflows without violating determinism or signing boundaries.

Does this approach support writing user state to specific app layers without violating determinism?▼

Writing user state to specific app layers is supported by aligning storage and authority boundaries with deterministic versus review zones. You must apply recommended write approaches, such as replace or append, to update allowed writable areas correctly.

Related Skills

Explore More Software Engineering Skills→
agent0aiagent0ai
1.4k

App Files And APIs

Read, discover, and modify app files via space.api helpers.

Official
Intermediate
sburlsburl
26

garbage-collect

Move files to a garbage folder while preserving git history.

Community
Intermediate
moking55moking55

map-api-backend-to-fontend

Map backend API endpoints to Next.js frontend hooks and types.

Community
Intermediate
openaiopenai
24.7k

security-threat-model

Generate repository-grounded Markdown threat models with trust boundaries and abuse paths.

Official
Advanced