uv
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads the uv binary and GitHub Actions from official Astral repositories. These are well-known and trusted sources for this ecosystem.
- [EXTERNAL_DOWNLOADS]: A maintenance script (
scripts/sync_uv_releases.py) fetches release data from the GitHub API to automate documentation updates. - [COMMAND_EXECUTION]: Provides extensive instructions and examples for executing Python tools, managing environments, and running scripts via the uv CLI.
- [SAFE]: The inclusion of a self-updating mechanism for version information reflects a maintainable and documentation-focused design without introducing malicious behavior.
Audit Metadata