uv-python-version-management

Pass

Audited by Gen Agent Trust Hub on Feb 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use the Bash tool for executing various uv subcommands, such as uv python list, uv python install, and uv python pin. These are standard operations for the tool's intended purpose.
  • [EXTERNAL_DOWNLOADS]: The skill includes a requirement to download the uv tool using a script located at https://astral.sh/uv/install.sh. This URL belongs to the official developer of the tool.
  • [REMOTE_CODE_EXECUTION]: The provided installation instruction curl -LsSf https://astral.sh/uv/install.sh | sh fetches and executes a script directly from the Astral domain. This is the standard installation method for the well-known uv package manager.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 24, 2026, 05:24 PM