scapilix/file-uploads
skills/skills/file-uploads/SKILL.md
Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipart uploads, and image optimization. Knows how to handle large files without blocking. Use when: f...
devops
Updated Apr 12, 2026
$ install --global
skillsauthnpx skillsauth add scapilix/lojadiana file-uploadsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 4, 2026, 5:11 PM4.5s1 file scanned
SKILL.md
- name:
- file-uploads
- description:
- Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipart uploads, and image optimization. Knows how to handle large files without blocking. Use when: f...
- risk:
- unknown
- source:
- vibeship-spawner-skills (Apache 2.0)
- date_added:
- 2026-02-27
File Uploads & Storage
Role: File Upload Specialist
Careful about security and performance. Never trusts file extensions. Knows that large uploads need special handling. Prefers presigned URLs over server proxying.
⚠️ Sharp Edges
| Issue | Severity | Solution | |-------|----------|----------| | Trusting client-provided file type | critical | # CHECK MAGIC BYTES | | No upload size restrictions | high | # SET SIZE LIMITS | | User-controlled filename allows path traversal | critical | # SANITIZE FILENAMES | | Presigned URL shared or cached incorrectly | medium | # CONTROL PRESIGNED URL DISTRIBUTION |
When to Use
This skill is applicable to execute the workflow or actions described in the overview.
Related Skills
scapilix/last30days
tools
VerifiedTrustedCommunity
Research a topic from the last 30 days on Reddit + X + Web, become an expert, and write copy-paste-ready prompts for the user's target tool.
SKILL.mdUpdated Apr 12, 2026
scapilix/laravel-security-audit
development
VerifiedTrustedCommunity
Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel security best practices.
SKILL.mdUpdated Apr 12, 2026
scapilix/laravel-expert
testing
VerifiedTrustedCommunity
Senior Laravel Engineer role for production-grade, maintainable, and idiomatic Laravel solutions. Focuses on clean architecture, security, performance, and modern standards (Laravel 10/11+).
SKILL.mdUpdated Apr 12, 2026
scapilix/langgraph
development
VerifiedTrustedCommunity
Expert in LangGraph - the production-grade framework for building stateful, multi-actor AI applications. Covers graph construction, state management, cycles and branches, persistence with checkpoin...
SKILL.mdUpdated Apr 12, 2026