file-upload-attacker - Audit file upload endpoints for vulnerabilities
Tests file upload endpoints for MIME bypass, path traversal, ZIP Slip, SVG XSS vulnerabilities
Tags
Updated: 2026-05-09Capabilities
Typical Inputs
Typical Outputs
What this skill does
- audit file upload endpoints
- detect MIME type bypass
- identify path traversal
- test ZIP Slip vulnerability
- scan SVG XSS risk
- generate security report
Inputs
- file upload handling code
- storage configuration
- unzip functions
- file type validation
Outputs
- file upload security audit report
- vulnerability findings
- remediation code
Requirements
- Claude Sonnet model
- file system access
- file read/write permissions