web-files-file-upload-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of educational patterns and code snippets for implementing secure and accessible file uploads in web applications.
- [SAFE]: Implementation details emphasize security best practices, such as mandatory server-side validation and magic-byte detection to prevent file-type spoofing.
- [SAFE]: Networking operations are limited to uploading files to designated endpoints (including secure presigned URLs), which aligns with the skill's stated purpose.
- [SAFE]: Persistence mechanisms are restricted to using
localStoragefor tracking resumable upload progress, which is a standard and benign development practice for this use case. - [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or unauthorized command execution was found in the documentation or provided code samples.
Audit Metadata