minimal-api-file-upload
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill offers comprehensive security best practices for developers implementing file uploads.
- Path Traversal Mitigation: It explicitly warns against using user-provided filenames and provides code to generate safe, unique filenames using GUIDs.
- File Type Validation: The workflow includes robust logic to validate file content using magic bytes (binary signatures) rather than relying on easily spoofable extensions or MIME types.
- Security Middleware Guidance: It correctly guides users on configuring anti-forgery protection and warns against disabling it for cookie-based authentication, which prevents CSRF attacks.
- Resource Protection: The documentation covers configuring request size limits at multiple layers (Kestrel and FormOptions) to mitigate potential Denial of Service (DoS) attacks.
Audit Metadata