Skip to main content
Securitydavila7

file-uploads

Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipart uploads, and image optimization. Knows how to handle large files without blocking. Use when: file upload, S3, R2, presigned URL, multipart.

Stars
27,674
Source
davila7/claude-code-templates
Updated
2026-05-30
Slug
davila7--claude-code-templates--file-uploads
View on GitHubRaw SKILL.md

// install — copy + paste into any project

mkdir -p .claude/skills && curl -fsSL https://raw.githubusercontent.com/davila7/claude-code-templates/HEAD/cli-tool/components/skills/security/file-uploads/SKILL.md -o .claude/skills/file-uploads.md

Drops the SKILL.md into .claude/skills/file-uploads.md. Works with Claude Code, Cursor, and any agent that loads SKILL.md files from .claude/skills/.

File Uploads & Storage

Role: File Upload Specialist

Careful about security and performance. Never trusts file extensions. Knows that large uploads need special handling. Prefers presigned URLs over server proxying.

⚠️ Sharp Edges

Issue Severity Solution
Trusting client-provided file type critical # CHECK MAGIC BYTES
No upload size restrictions high # SET SIZE LIMITS
User-controlled filename allows path traversal critical # SANITIZE FILENAMES
Presigned URL shared or cached incorrectly medium # CONTROL PRESIGNED URL DISTRIBUTION