file-access-preflight
Run the pre-flight checklist before an agent gets filesystem access — the scope boundary (which directories, read vs write), the secrets-exposure sweep, the destructive-operation gates, and the path-traversal and untrusted-file defenses. Use when asked let my agent access my files safely, is it safe to give the agent file/computer access, guardrails before the agent touches my filesystem, or scope down my coding agent's reach. Produces the scope boundary, the secrets sweep, the write/delete gates, and the untrusted-content rules.
npx skills add mohitagw15856/pm-claude-skills --skill file-access-preflight --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# File Access Preflight Skill Filesystem access is where an agent goes from talking to *doing* — and the two failure modes are opposite: reading too much (the agent slurps your `.env`, SSH keys, and password manager export into its context and thence into logs and API calls) and writing too much (a confused or hijacked agent overwrites, deletes, or `rm -rf`s outside its lane). The seatbelt: draw the scope boundary tightly, sweep for the secrets that must never enter context, gate the destructive operations, and treat file *contents* as untrusted input — because a file the agent reads can carry instructions just like an email or a web page. ## What This Skill Produces - **The scope boundary** — the exact directories the agent may read and (separately, more narrowly) write, and everything explicitly out of bounds - **The secrets sweep** — the credential-bearing files that must be excluded from the agent's reachable scope, checked before go-live - **The destructive-operation gates** — which writes/deletes/moves require confirmation, and the never-outside-scope rule - **The untrusted-content defenses** — the rule that file contents are data, and the path-traversal guard ## Required Inp
- What This Skill Produces
- Required Inputs
- Framework: The Preflight Checklist
- Output Format
- The Scope Boundary
- The Secrets Sweep
- Destructive-Operation Gates
- Untrusted-Content + Traversal Defenses
- Autonomous Extras (if unsupervised)
- Quality Checks
- Anti-Patterns
What does the file-access-preflight skill do?
Run the pre-flight checklist before an agent gets filesystem access — the scope boundary (which directories, read vs write), the secrets-exposure sweep, the destructive-operation gates, and the path-traversal and untrusted-file defenses. Use when asked let my agent access my files safely, is it safe to give the agent file/computer access, guardrails before the agent touches my filesystem, or scope down my coding agent's reach. Produces the scope boundary, the secrets sweep, the write/delete gates, and the untrusted-content rules.
How do I install it?
Run `npx skills add mohitagw15856/pm-claude-skills --skill file-access-preflight --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From mohitagw15856/pm-claude-skills, a repository with 1,255 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.