Skip to content
role-fullstack:file-upload-handling logo

role-fullstack:file-upload-handling

Implement file upload flows with presigned URLs (S3, GCS, R2), multipart/tus resumable uploads, Sharp image processing, drag-and-drop UI with progress indicators, server-side MIME validation via magic bytes, virus scanning, and CDN serving. Use when adding profile pictures, document attachments, ...

rnavarych/alpha-engineer0installs15stars

SKILL.md

Full skill instructions

File Upload Handling

When to use

  • Implementing profile picture or avatar upload
  • Building document attachment or media gallery features
  • Handling bulk file imports or exports
  • Adding drag-and-drop upload UX with progress feedback
  • Setting up CDN serving for uploaded assets
  • Adding virus scanning or strict file type enforcement

Core principles

  1. Never trust client-reported types — always validate MIME type server-side by reading magic bytes, not the Content-Type header
  2. Presigned URLs over server proxy — upload directly from client to S3/​GCS; never stream file bytes through the application server
  3. Rename to UUIDs — strip original filenames entirely to prevent path traversal, collisions, and enumeration attacks
  4. Process media asynchronously — run Sharp resizing and format conversion in BullMQ jobs, not in the request handler
  5. Clean up orphans — run a periodic job to delete uploads unreferenced in the database; storage costs compound silently

Reference Files

  • references/​upload-strategies.md — strategy selection table (multipart form vs presigned URL vs tus), presigned URL flow steps, AWS SDK v3 code example, progress indicator with XMLHttpRequest, CDN serving with signed URLs and cache headers
  • references/​validation-security.md — client-side vs server-side validation responsibilities, magic byte MIME checking, ClamAV/​cloud malware scanning, Sharp image processing pipeline, react-dropzone UI patterns, common pitfalls

More skills from rnavarych

domain-iot:iot-security logo
rnavarych/alpha-engineer

domain-iot:iot-security

IoT security practices covering device identity with X.509 and secure elements, secure boot chains, encrypted communication (TLS/DTLS), firmware signing, network segmentation, device attestation, and vulnerability management for resource-constrained devices.

15 0
View
role-architect:migration-planner logo
rnavarych/alpha-engineer

role-architect:migration-planner

Migration planning expertise including strangler fig pattern, parallel run strategy, data migration techniques, feature parity tracking, rollback plans, phased timelines, risk mitigation, and zero-downtime migration.

15 0
View
role-frontend:state-management logo
rnavarych/alpha-engineer

role-frontend:state-management

State management expertise including local vs global state decisions, Redux Toolkit, Zustand, Jotai, MobX, Context API patterns, server state (React Query, SWR) vs client state, optimistic updates, and state machines with XState.

15 0
View
role-devops:terraform-expert logo
rnavarych/alpha-engineer

role-devops:terraform-expert

Terraform and Infrastructure as Code expertise covering HCL module design, state management, workspaces, provider configuration, drift detection, Terragrunt, infrastructure testing, and resource lifecycle management.

15 0
View
role-aqa:test-data-management logo
rnavarych/alpha-engineer

role-aqa:test-data-management

Test data management with factory patterns (Faker.js, Fishery, Factory Bot), database seeding, test data isolation (transactions, cleanup), anonymization and masking for production data, synthetic data generation, fixture management, and shared test state risks. Use when designing test data strat...

15 0
View
mobile-flutter logo
rnavarych/alpha-engineer

mobile-flutter

Flutter 3.27+ patterns — Riverpod 2 state with codegen, GoRouter 14+ navigation, Impeller rendering (default on all platforms), WASM web, extension types, on-device AI (firebase_ai, MediaPipe), Patrol 3.x testing, platform channels, performance

15 0
View
role-architect:gcp-architect logo
rnavarych/alpha-engineer

role-architect:gcp-architect

GCP architecture expertise including Google Cloud Architecture Framework, project and organization structure, VPC and networking design, data and analytics architecture, Kubernetes and serverless patterns, AI/ML platform design, security architecture, and cost optimization strategies. Use proacti...

15 0
View
role-aqa:ci-test-integration logo
rnavarych/alpha-engineer

role-aqa:ci-test-integration

CI/CD test integration: parallel test execution (sharding), test splitting strategies, flaky test quarantine, test reporting (Allure, ReportPortal, JUnit XML), quality gates (coverage thresholds, no new failures), test result caching, and pre-commit hooks. Use when configuring test pipelines, opt...

15 0
View
role-devops:monitoring-setup logo
rnavarych/alpha-engineer

role-devops:monitoring-setup

Monitoring and observability expertise covering Prometheus/Grafana stack, Datadog, CloudWatch, PagerDuty integration, custom metrics, dashboard design using USE/RED methods, alert routing, uptime monitoring, and log aggregation.

15 0
View
role-frontend:vue-expert logo
rnavarych/alpha-engineer

role-frontend:vue-expert

Vue.js expertise including Composition API, Pinia state management, Nuxt.js 3, Vue Router, custom directives, provide/inject patterns, transition system, and Volar tooling configuration.

15 0
View
alpha-core:observability logo
rnavarych/alpha-engineer

alpha-core:observability

Sets up observability: structured logging, metrics collection, distributed tracing, alerting rules, dashboard design, SLI/SLO/SLA definition. Covers ELK, Prometheus, Grafana, Datadog, OpenTelemetry. Use when implementing monitoring, debugging production issues, or designing observability architec...

15 0
View
billy-voice-ru logo
rnavarych/alpha-engineer

billy-voice-ru

Russian language calibration for Billy Milligan agents. Load when session language is RU. Contains native speech patterns, swearing vocabulary, pet name styles, and anchor examples for all 5 agents.

15 0
View

Popular AI tools

Kaiber logo
Video

Kaiber

Generate, edit, and beat-sync AI video with leading models in one workspace.

Paid
View
Vimcal logo
Productivity

Vimcal

The world's fastest calendar for remote work

Free
View

Transform Your Design with AI Designer by ImgCreator.ai

Freemium
View
Akool AI logo
Content & writing

Akool AI

Revolutionizing Video Production with AI-Powered Creativity

Paid
View

Extend an image past the frame and let AI fill the new aspect ratio.

Freemium
View
StarByFace logo
Security

StarByFace

Discover your celebrity doppelgänger with StarByFace!

Free
View
C

ChainClarity explains 700+ crypto whitepapers in plain English, with layered summaries, comparisons, research tools, alerts, and a $4.99 Pro plan.

Freemium
View
Opus Clip logo
Coding & apps

Opus Clip

Opus.ai: Revolutionize Your Web Experience

Free
View