The Agent Skills Directory

[SAFE]: The skill advocates for several security best practices in file handling, including direct-to-cloud uploads to bypass server resource exhaustion, pre-signed URLs with short Time-To-Live (TTL) values, and private bucket configurations by default.
[SAFE]: Includes specific guidance on validating file content types and sizes, and recommends using the Marcel library for sniffing magic bytes rather than trusting client-provided MIME headers to prevent file extension spoofing attacks.
[SAFE]: Configuration examples correctly utilize Rails.application.credentials for managing sensitive AWS and GCP keys, adhering to standard Rails secret management practices and avoiding hardcoded credentials.
[SAFE]: References to external tools and libraries such as libvips, image_processing, Shrine, and Marcel point to well-known and official repositories within the Ruby on Rails ecosystem.
[SAFE]: The skill warns against using user-provided filenames as URLs, providing a mitigation against potential path traversal and schema confusion issues in generated code.

activestorage-uploads