file-upload-media-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is an educational resource that documents secure architectural patterns for file handling, including input validation, storage abstraction, and asynchronous processing.
- [SAFE]: Code examples demonstrate security best practices such as validating MIME magic bytes instead of trusting client-side headers and using server-assigned UUIDs for storage keys to prevent path traversal.
- [EXTERNAL_DOWNLOADS]: The skill references standard and well-known libraries including the AWS SDK (
@aws-sdk/client-s3), the Sharp image processing library, and thetusresumable upload protocol. These are legitimate dependencies for the described functionality. - [COMMAND_EXECUTION]: The Go code snippet demonstrates the use of
exec.CommandContextto invokeffmpegfor video transcoding. The arguments provided to the command are controlled by the internal logic, and the use of external binaries is a standard requirement for media processing tasks.
Audit Metadata