integrate-uppy-transloadit-s3-uploading-to-nextjs
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements best practices for third-party integrations by providing code for server-side signature generation. This ensures that the
TRANSLOADIT_SECRETis kept within the server environment and is never exposed to the client-side browser. - [EXTERNAL_DOWNLOADS]: The skill references working scenarios and configuration files from the vendor's official GitHub repository (
github.com/transloadit/skills). - [COMMAND_EXECUTION]: Includes instructions for the user to install standard vendor packages via
npmand use a template creation utility vianpxduring the development setup process. - [INDIRECT_PROMPT_INJECTION]: The skill implements a file upload interface which handles external data at runtime.
- Ingestion points: User-selected files in the
app/upload-demo.tsxcomponent. - Boundary markers: Uses Uppy's built-in restrictions (e.g.,
maxNumberOfFiles). - Capability inventory: File data is handled by the Transloadit plugin for upload and processing; the skill does not grant the agent capabilities to execute local commands based on file content.
- Sanitization: Relies on Transloadit's cloud service for secure file handling and processing.
Audit Metadata