r2-upload
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure credential management by storing sensitive API keys in an external configuration file (
~/.r2-upload.yml) rather than hardcoding them in the source code. - [SAFE]: The interactive onboarding script (
src/onboard.ts) automatically sets the configuration file permissions to0600(owner read/write only) to protect against unauthorized access by other users on the system. - [SAFE]: The skill generates presigned URLs for file downloads with a default expiration of 5 minutes, minimizing the window of exposure for shared files.
- [SAFE]: Random UUID prefixes are used by default for uploaded object keys to prevent filename collisions and mitigate resource enumeration attacks.
- [COMMAND_EXECUTION]: The skill performs file system reads to upload data and executes cloud storage operations (upload, list, delete) via the official AWS SDK for JavaScript.
- [EXTERNAL_DOWNLOADS]: The skill interacts with user-defined cloud storage endpoints (e.g., Cloudflare R2 or AWS S3) to perform its primary function.
Audit Metadata