skills/storage-and-upload-security/SKILL.md

---
name: storage-and-upload-security
description: Review object storage, file uploads, MIME validation, path ownership, malware risk, and download authorization.
---

# Storage and Upload Security

Check file size, type, content validation, names, paths, overwrite behavior, ownership, bucket visibility, signed URL expiry, download authorization, metadata, decompression, and virus or abuse handling. For Supabase Storage, review object policies and remember upsert requires the relevant insert, select, and update permissions.