Be careful, the upload action is currently implemented with no checks. Be sure your manifest is accurate.