Skills
skills/hsiangjenli/skills/skill-creator-uv/Gen Agent Trust Hub

skill-creator-uv

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run in scripts/init_skill.py to execute uv commands for project initialization and dependency management. These operations are core to the skill's purpose and use validated inputs for skill naming to prevent command injection.
  • [EXTERNAL_DOWNLOADS]: The generated dependency management script (check_dependencies.py.template) includes a print statement directing users to install the uv tool from its official, well-known source (astral.sh). This is an informative reference to a trusted tool rather than an automated execution of untrusted code.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 07:02 AM