sc-file-upload

Detect insecure file upload vulnerabilities in web application endpoints.

Updated Aug 23, 2026

Search Tags:#security #vulnerability #upload #webshell #mime-type #server-hardening

Ready to run

npx skills add https://github.com/kocakburhan/emlakdefter --skill sc-file-upload-kocakburhan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: sc-file-upload
Source: https://github.com/kocakburhan/emlakdefter/tree/main/.agents/skills/security-check/skills/sc-file-upload
Command: npx skills add https://github.com/kocakburhan/emlakdefter --skill sc-file-upload-kocakburhan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Insecure file uploads present risk of remote code execution and stored XSS; this Skill detects such issues in upload endpoints by validating types, MIME types, and storage destinations, and flags dangerous patterns.

Core Features & Use Cases

Detects unrestricted file types, MIME type mismatches, polyglot files, and webshell uploads.
Evaluates upload destinations, naming and storage security, size limits, and script execution allowances.
Use cases include CI security pipelines scanning Node.js, PHP, Python, and Java upload endpoints.

Quick Start

Assess your web application's file upload endpoints for unsafe configurations and generate a report of insecure upload patterns.

Frequently Asked Questions about sc-file-upload

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect insecure file upload vulnerabilities in web applications?▼

Detect insecure file uploads by scanning endpoints for unrestricted file types, MIME type mismatches, polyglot files, and webshell patterns to prevent remote code execution and stored XSS risks.

What security checks are needed for safe file upload endpoints?▼

Safe file upload endpoints require server-side validation, randomized filenames, file size limits, executable-permission checks, and storing uploads outside the webroot to block script execution.

Does the file upload vulnerability scanner work with PHP, Node.js, Python, and Java?▼

Yes, the scanner applies to upload endpoints across Node.js, PHP, Python, and Java frameworks, evaluating storage destinations, naming, size limits, and script execution allowances.

How can I prevent webshell uploads and remote code execution via file uploads?▼

Prevent webshell uploads by enforcing server-side file type validation, checking MIME types, restricting executable permissions, and storing files outside the webroot directory.

Can I scan file upload endpoints in CI security pipelines?▼

Yes, assess web application upload endpoints for unsafe configurations and generate reports of insecure upload patterns directly within CI security pipelines.

What is a polyglot file and how does it bypass upload validation?▼

A polyglot file is a malicious payload combining multiple file formats to bypass MIME type validation and unrestricted file type checks, which this scanner detects to prevent execution.