file-uploads
Securely manages file uploads, cloud storage integrations, and large file handling without blocking.
Install
mkdir -p .claude/skills/file-uploads && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/758" && unzip -o skill.zip -d .claude/skills/file-uploads && rm skill.zipInstalls to .claude/skills/file-uploads
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipart uploads, and image optimization. Knows how to handle large files without blocking. Use when: file upload, S3, R2, presigned URL, multipart.Key capabilities
- →Validates file integrity using magic bytes to prevent spoofing
- →Enforces file size constraints
- →Implements secure presigned URL workflows
- →Configures multipart upload parameters
How it works
It integrates security patterns like magic byte checking and presigned URL distribution instead of relying on client-side headers.
Inputs & outputs
When to use file-uploads
- →Implement secure S3 file uploads
- →Configure multipart uploads for large files
- →Optimize image upload workflows
About this skill
File Uploads & Storage
Role: File Upload Specialist
Careful about security and performance. Never trusts file extensions. Knows that large uploads need special handling. Prefers presigned URLs over server proxying.
⚠️ Sharp Edges
| Issue | Severity | Solution |
|---|---|---|
| Trusting client-provided file type | critical | # CHECK MAGIC BYTES |
| No upload size restrictions | high | # SET SIZE LIMITS |
| User-controlled filename allows path traversal | critical | # SANITIZE FILENAMES |
| Presigned URL shared or cached incorrectly | medium | # CONTROL PRESIGNED URL DISTRIBUTION |
When not to use it
- →When the application requires simple server-side proxying without security concerns
- →For tiny files where multipart overhead is unnecessary
Prerequisites
Limitations
- →Requires specific cloud provider credentials
- →Security relies on the accuracy of the implemented validation checks
How it compares
It prioritizes defensive programming by explicitly rejecting insecure practices like trusting client file extensions.
Compared to similar skills
file-uploads side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| file-uploads (this skill) | 4 | 6mo | No flags | Advanced |
| azure-cloud-hsm | 0 | 1mo | No flags | Advanced |
| amazon-alexa | 0 | 2mo | Review | Advanced |
| azure-partner-solutions | 0 | 4mo | No flags | Advanced |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by davila7
View all by davila7 →You might also like
azure-cloud-hsm
vinodrex
Expert knowledge for Azure Cloud Hsm development including troubleshooting, best practices, limits & quotas, security, and integrations & coding patterns. Use when configuring auth, key lifecycle, PKCS#11 cert storage, Event Hubs logging, or checking HSM limits, and other Azure Cloud Hsm related dev
amazon-alexa
asnk633
Integracao completa com Amazon Alexa para criar skills de voz inteligentes, transformar Alexa em assistente com Claude como cerebro (projeto Auri) e integrar com AWS ecosystem (Lambda, DynamoDB, Polly, Transcribe, Lex, Smart Home).
azure-partner-solutions
RobGibbens
Expert knowledge for Azure Partner Solutions development including troubleshooting, decision making, architecture & design patterns, security, configuration, and integrations & coding patterns. Use when building, debugging, or optimizing Azure Partner Solutions applications. Not for Azure Industry (
integration-connectivity-generate
forcedotcom
Salesforce integration architecture and runtime plumbing with 120-point scoring. Use this skill to set up Named Credentials, External Credentials, External Services, REST/SOAP callout patterns, Platform Events, and Change Data Capture. TRIGGER when: user sets up Named Credentials, External Services,
aws-appsync
chrishuffman5
AppSync via AWS CLI v2 (`aws appsync`). GraphQL and Events APIs, data sources, resolvers, functions, types, API keys, caching, domain names, merged APIs.
graphql
davila7
GraphQL gives clients exactly the data they need - no more, no less. One endpoint, typed schema, introspection. But the flexibility that makes it powerful also makes it dangerous. Without proper controls, clients can craft queries that bring down your server. This skill covers schema design, resolvers, DataLoader for N+1 prevention, federation for microservices, and client integration with Apollo/urql. Key insight: GraphQL is a contract. The schema is the API documentation. Design it carefully.