axum-impl-file-upload
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and secure implementation patterns for Axum multipart file uploads, specifically addressing common vulnerabilities through detailed instructions and decision trees.
- [SAFE]: Instructions correctly identify and provide mitigations for Path Traversal vulnerabilities by demonstrating server-side path sanitization and UUID/timestamp-based naming in Pattern AP5 and Example 3, advising never to trust client-supplied filenames.
- [SAFE]: The skill addresses Denial-of-Service (DoS) and memory exhaustion risks by explaining the default 2MB body limit and providing instructions on how to safely manage larger uploads using streaming via the chunk() method and appropriate limit layers like RequestBodyLimitLayer.
- [SAFE]: Code examples promote secure coding practices by recommending against the use of unwrap() on body-parsing methods, instead providing patterns for mapping MultipartError to appropriate 400-series HTTP status codes to avoid handler panics.
Audit Metadata