Skip to content
Back to skills

Backstage App

ASecurity

Use when editing Backstage adopter-app composition, packages, dependency alignment, or package-owned tests.

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added September 4, 2026
ai-agentsnodegitapifrontendbackend

Works with

  • api

Security analysis

A100/100

Scanned September 4, 2026

npx -y skills add paulasilvatech/awesome-harness-primitives --skill backstage-app --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Backstage App?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Backstage App
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/paulasilvatech-backstage-app-awesome-harness-primitives/badge)](https://www.skillsdirectory.com/skills/paulasilvatech-backstage-app-awesome-harness-primitives)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: backstage-app
description: >-
  Use when editing Backstage adopter-app composition, packages, dependency alignment, or
  package-owned tests.
paths:
  - backstage/backstage.json
  - backstage/package.json
  - backstage/tsconfig.json
  - backstage/packages/app/**
  - backstage/packages/backend/**
  - backstage/plugins/ai-chat/**
user-invocable: false
---

<!-- Generated from harness/github-copilot/plugins/open-horizons-platform/instructions/backstage-app.instructions.md by harness/claude-code/scripts/convert_from_copilot.py. Edit the source, not this file. -->

# Backstage Application

These rules cover the adopter app under `backstage/`. App configuration is owned separately by the `backstage-config` instructions.

## Conventions

- Keep frontend composition in `backstage/packages/app`, backend composition in `backstage/packages/backend`, and reusable AI Chat behavior in its plugin package.
- Register plugins and modules through supported Backstage extension points; do not import package internals.
- Align `@backstage/*` dependencies with the release policy recorded by `backstage.json` and the root Backstage manifest.
- Preserve package ownership: package code, tests, and exports stay in the package that owns the behavior.
- Keep browser code free of server credentials, Node-only dependencies, and privileged integration logic.
- Use the repository's current frontend/backend system; make compatibility shims explicit and local when legacy behavior must remain.
- Prefer package public APIs and typed service contracts over cross-package relative imports.

## Verification

- The owning package's test, lint, typecheck, or build script covers the change.
- Dependency changes remain version-aligned across Backstage workspaces.
- Frontend bundles contain no secrets or backend-only configuration.

## Do / Do Not

| Do | Do not |
| --- | --- |
| Use package public APIs and execute the owning package checks. | Reach across package internals or claim an unrun build passed. |
| Preserve version alignment and frontend/backend boundaries. | Bundle secrets or backend-only configuration in browser code. |

## Checklist Before Opening a PR

- [ ] The change matches this instruction's `applyTo` scope.
- [ ] Package public APIs and workspace version alignment are preserved.
- [ ] Focused test, lint, typecheck, or build checks pass.
- [ ] Frontend output contains no secret or backend-only configuration.
- [ ] No unrelated edits or unresolved placeholders remain.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.