AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Hf Static Space Deployer

skill-fast-agent-ai-skills-hf-static-space-deployer · by fast-agent-ai

>-

No reviews yet
0 installs
34 views
0.0% view→install

Install

$ agentstack add skill-fast-agent-ai-skills-hf-static-space-deployer

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-fast-agent-ai-skills-hf-static-space-deployer)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Hf Static Space Deployer? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

HF Static Space Deployer

Deploy static web content to Hugging Face Spaces in a repeatable way.

Choose the correct deployment mode

Use this skill when the app is static output.

  1. Plain static files (no build step)
  • index.html + CSS/JS files committed directly.
  • Use sdk: static and app_file: index.html.
  1. Build-first static app
  • Framework source (React/Vite/Svelte/Vue/etc.) requires build.
  • Use sdk: static, app_build_command, and app_file pointing to built HTML (for example dist/index.html).
  1. Do not use this skill when server-side runtime is required
  • If the app needs a backend process, custom server routes, or non-static runtime behavior, use Docker Spaces instead.

Minimum required repo structure

At minimum, ensure:

  • README.md with YAML metadata block (includes sdk: static).
  • App entry HTML referenced by app_file.
  • Any source/build files needed for build (if using app_build_command).

See templates in:

  • [references/readmetemplates.md](references/readmetemplates.md)

Standard workflow

  1. Authenticate with Hugging Face.
  2. Create Space as repo_type=space and space_sdk=static.
  3. Upload project files.
  4. Wait for build/startup.
  5. Validate app URL and behavior.

Use exact commands from:

  • [references/deployworkflows.md](references/deployworkflows.md)

Deployment quality checks

After upload/build, verify:

  1. Space build succeeds.
  2. app_file exists at expected path.
  3. Site loads at the Space URL.
  4. Asset paths resolve correctly (no broken CSS/JS).
  5. If SPA:
  • hash routing works directly; history routing may need fallback strategy.
  1. If query/hash syncing with parent page is required, use Spaces postMessage pattern.

See:

  • [references/troubleshooting.md](references/troubleshooting.md)

Security and platform caveats

  1. Static Spaces run inside an iframe on huggingface.co/spaces/....
  2. For static Spaces, variables/secrets are available to browser JS through window.huggingface.variables.
  3. Do not treat static frontend variables as confidential server-only secrets.
  4. Cookie behavior can differ from first-party hosting due to iframe constraints.

Use:

  • [references/securityandplatformnotes.md](references/securityandplatformnotes.md)

CI/CD guidance

Prefer one of:

  1. Push directly with hf upload.
  2. Mirror from GitHub with a GitHub Action that pushes to the Space repo.

Use templates from:

  • [references/deployworkflows.md](references/deployworkflows.md)

Local tooling bundled with this skill

  • scripts/scaffold_static_space.py: generate a README.md metadata block and optional GitHub Action workflow.
  • scripts/validate_static_space.py: validate local projects and/or existing deployed Spaces (for example --space-id evalstate/foo).

Output expectations

When helping a user, always produce:

  1. Final README.md YAML block.
  2. Exact deploy command sequence.
  3. Suggested CI option (manual or GitHub Actions).
  4. Post-deploy validation checklist.
  5. Troubleshooting steps tailored to framework/output path.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.