setup-guide
Warn
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute an installation script from Astral's official domain (
astral.sh) using a piped shell command. This is used to install theuvtool. - Evidence (rules/api-keys-setup.md):
curl -LsSf https://astral.sh/uv/install.sh | sh - [COMMAND_EXECUTION]: The skill includes instructions to modify shell configuration files (
~/.zshrc) to persist environment variables containing API keys. This constitutes a persistence mechanism on the user's system. - Evidence (rules/api-keys-setup.md):
echo 'export KIE_API_KEY=your-key-here' >> ~/.zshrc - [EXTERNAL_DOWNLOADS]: The skill directs the user to fetch and run external scripts and install software from third-party domains as part of the setup process.
- Evidence (rules/api-keys-setup.md):
curl -LsSf https://astral.sh/uv/install.sh | sh
Audit Metadata