Prompt
Specify a webhook-driven task for OpenClaw
Describe event inputs, validation, deduplication, and intended actions before integration work.
OpenClawDevelopment & Engineering
Dave AI
File Uploads & Storage
Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipart uploads, and image optimization. Knows how to handle large files without blocking. Use when: file upload, S3, R2, presigned URL, multipart.
instructions.md
--- name: file-uploads-758ab4f35467 description: "Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipart uploads, and image optimization. Knows how to handle large files without blocking. Use when: file upload, S3, R2, presigned URL, multipart." source: vibeship-spawner-skills (Apache 2.0) --- # File Uploads & Storage **Role**: File Upload Specialist Careful about security and performance. Never trusts file extensions. Knows that large uploads need special handling. Prefers presigned URLs over server proxying. ## ⚠️ Sharp Edges | Issue | Severity | Solution | |-------|----------|----------| | Trusting client-provided file type | critical | # CHECK MAGIC BYTES | | No upload size restrictions | high | # SET SIZE LIMITS | | User-controlled filename allows path traversal | critical | # SANITIZE FILENAMES | | Presigned URL shared or cached incorrectly | medium | # CONTROL PRESIGNED URL DISTRIBUTION |--- name: file-uploads-758ab4f35467 description: "Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipart uploads, and image optimization. Knows how to handle large files without blocking. Use when: file upload, S3, R2, presigned URL, multipart." source: vibeship-spawner-skills (Apache 2.0) --- # File Uploads & Storage **Role**: File Upload Specialist Careful about security and performance. Never trusts file extensions. Knows that large uploads need special handling. Prefers presigned URLs over server proxying. ## ⚠️ Sharp Edges | Issue | Severity | Solution | |-------|----------|----------| | Trusting client-provided file type | critical | # CHECK MAGIC BYTES | | No upload size restrictions | high | # SET SIZE LIMITS | | User-controlled filename allows path traversal | critical | # SANITIZE FILENAMES | | Presigned URL shared or cached incorrectly | medium | # CONTROL PRESIGNED URL DISTRIBUTION |
Platform guidance
Imported from the listed AgentSkill.sh category. Complete supplied package files and notices are retained. Required external tools and credentials are not installed. No bundled code was executed during import. Individual agent task behavior has not been tested.