uv-project-management
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill describes standard workflows for downloading Python packages from the official Python Package Index (PyPI) and other configured registries using the uv tool. All external links point to official Astral (uv) documentation and source code repositories.- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute standard uv CLI commands for project and dependency management. These operations are restricted to the local project environment and represent the intended use case of the skill.- [CREDENTIALS_UNSAFE]: The documentation correctly utilizes environment variable placeholders (e.g., ${PRIVATE_INDEX_TOKEN}) for private package index configuration, preventing the exposure of actual credentials or secrets.
Audit Metadata