upload

Handle secure file uploads with validation, scanning, and media optimization.

26|8|Updated Mar 19, 2026
One-click install
npx skills add https://github.com/arbazkhan971/godmode --skill upload
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: upload
Source: https://github.com/arbazkhan971/godmode/tree/main/skills/upload
Command: npx skills add https://github.com/arbazkhan971/godmode --skill upload

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Centralizes and hardens file upload and media processing so teams can accept images, video, audio, and documents without introducing security, performance, or privacy regressions. It removes fragile patterns like proxying uploads through the app, trusting client-provided MIME types, and serving unscanned content.

Core Features & Use Cases

  • Presigned & Resumable Flows: Generate presigned PUT URLs, multipart uploads, and tus resumable endpoints to handle small images, large videos, and intermittent mobile networks.
  • Security & Validation: Server-side type allowlists, magic-bytes verification, ClamAV scanning, EXIF stripping, quota checks, and quarantine policies to prevent malicious or private data leaks.
  • Optimization & Delivery: Image variants (WebP/AVIF), LQIP placeholders, FFmpeg transcoding and HLS packaging for video, CDN signing for private assets, and lifecycle cleanup for orphaned uploads.
  • Use Case: Accept user profile photos and long-form video uploads concurrently, validate and scan every file, produce optimized variants, and serve through a CDN with short-lived signed URLs.

Quick Start

Request a presigned PUT URL for the file, upload directly to object storage, and allow the backend worker to validate, virus-scan, strip EXIF, and generate optimized variants before making the URL available.

Frequently Asked Questions about upload

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I handle secure file uploads and media processing for a web application?

Secure file uploads and media processing are handled using presigned PUT URLs, multipart uploads, and server-side validation including magic-bytes verification and ClamAV scanning to prevent malicious data leaks.

What is the best way to process and optimize video uploads for CDN delivery?

Video uploads are optimized for CDN delivery through FFmpeg transcoding and HLS packaging, generating short-lived signed URLs that securely serve transcoded private video content to end users.

How does presigned URL upload validation work for large files?

Presigned URL upload validation works by allowing clients to upload directly to object storage, after which a backend worker validates magic-bytes, scans for viruses using ClamAV, and generates optimized media variants before publishing the URL.

Can I use multipart and resumable uploads for intermittent mobile networks?

Multipart uploads and tus resumable endpoints are supported to handle large video files and intermittent mobile networks, ensuring robust transfer completion without proxying uploads through the application server.

How do I strip EXIF data and generate WebP or AVIF variants from uploaded images?

EXIF data is stripped and WebP or AVIF variants are generated by a backend worker after the file is uploaded, ensuring privacy and delivering optimized images via LQIP placeholders and CDN distribution.

When should I not proxy file uploads through my application server?

You should not proxy file uploads through your application server when handling large videos or high concurrency; instead, use presigned URLs for direct-to-storage uploads to avoid performance regressions and fragile processing patterns.