The Agent Skills Directory

[SAFE]: The skill documents the integration of @better-upload/server and @better-upload/client, which are specialized libraries for S3 upload management in TanStack Start.
[SAFE]: Instructions correctly recommend the use of environment variables for sensitive S3 credentials and encourage managing them via .env files, following industry standards for secret management.
[INDIRECT_PROMPT_INJECTION]: The skill handles untrusted user data (file uploads). It mitigates associated risks by instructing the agent to implement Zod validation for client-side metadata and use sanitization routines (sanitizeKey) and UUIDs for S3 object keys to prevent path traversal and naming collisions.
[DYNAMIC_EXECUTION]: The documentation includes a Vite development server plugin (forwardApiRequestsPastViteAssetMiddleware) used to modify request headers. This is a standard development-only workaround for Vite's static asset pipeline and does not pose a runtime security risk to the production application.
[SAFE]: Authentication is consistently emphasized across the documentation, with examples showing how to wrap upload handlers in authentication checks (e.g., endpointAuth.projectMember).

tanstack-better-upload