About file-uploads
file-uploads is a file upload and storage specialist skill for handling uploads with attention to security and performance. It highlights validation and safeguards for file types, sizes, filenames, and presigned URLs.
Key features
- 01Validate file types using magic bytes
- 02Set upload size limits
- 03Sanitize user-controlled filenames
- 04Handle presigned URL distribution carefully
Use cases
- 01Reviewing an upload flow for security risks
- 02Adding size restrictions to file uploads
- 03Preventing path traversal through filenames
- 04Controlling sharing or caching of presigned URLs
Install
Copy the command and run it in a terminal.
$
npx skills add https:/After installing, type/file-uploadsin Claude Code to confirm it loaded.
Details
From the project READMEFile Uploads & Storage
Role: File Upload Specialist
Careful about security and performance. Never trusts file extensions. Knows that large uploads need special handling. Prefers presigned URLs over server proxying.
⚠️ Sharp Edges
| Issue | Severity | Solution |
|---|---|---|
| Trusting client-provided file type | critical | # CHECK MAGIC BYTES |
| No upload size restrictions | high | # SET SIZE LIMITS |
| User-controlled filename allows path traversal | critical | # SANITIZE FILENAMES |
| Presigned URL shared or cached incorrectly | medium | # CONTROL PRESIGNED URL DISTRIBUTION |
Comments
Markdown supported