file-upload-fullstack
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides comprehensive instructions for building secure file upload pipelines. It correctly identifies and mitigates common security risks such as path traversal (by generating keys server-side), unauthorized access (via short-lived presigned URLs and ownership checks), and resource exhaustion (through direct-to-cloud uploads and size enforcement).
- [EXTERNAL_DOWNLOADS]: The skill references official Amazon Web Services (AWS) SDK libraries (
@aws-sdk/client-s3,@aws-sdk/s3-request-presigner,@aws-sdk/cloudfront-signer, and@aws-sdk/client-cloudfront). These are well-known, trusted packages provided by a verified organization for interacting with cloud infrastructure.
Audit Metadata