file-upload
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for handling file uploads, including explicit instructions for server-side MIME type and file size validation, authentication checks before generating upload tokens, and the use of short-lived presigned URLs.
- [EXTERNAL_DOWNLOADS]: The skill references and installs official packages from trusted providers, specifically
@vercel/bloband the@aws-sdksuite for S3/R2 integration. These are standard industry dependencies. - [COMMAND_EXECUTION]: Basic shell commands (
cat,grep,npm install) are used for legitimate project configuration and environment detection. No arbitrary or dangerous command execution patterns were found. - [DATA_EXFILTRATION]: No evidence of data exfiltration or credential harvesting. The skill correctly instructs users to manage sensitive credentials (API keys, tokens) using environment variables and
.env.exampletemplates, which is the standard secure practice for secret management.
Audit Metadata