migrate-to-uv
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a legitimate development workflow for transitioning Python projects to modern build systems. It utilizes well-known industry tools such as uv, ruff, and pytest for its primary operations.
- [EXTERNAL_DOWNLOADS]: The skill instructions include references to official installation scripts from astral.sh and standard GitHub Actions from the actions/ and astral-sh/ organizations. These are well-known technology providers.
- [COMMAND_EXECUTION]: Local shell commands (e.g., uv, grep, sed, git) are used to perform project analysis and file transformations. These operations are strictly limited to the intended purpose of project migration and do not exhibit malicious patterns.
- [DATA_EXFILTRATION]: No evidence of unauthorized data transfer was detected. Network operations are confined to standard interactions with legitimate package registries (PyPI, Test PyPI) and the vendor's official GitHub repositories.
Audit Metadata