uv-package-manager
Fail
Audited by Socket on Feb 15, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
BENIGN: The fragment is a documentation/skill description for uv and does not contain executable code or covert data flows. Installation instructions reference external scripts but are standard for distribution. Primary risk concerns are standard supply-chain due-diligence checks (verify domain authenticity and repository provenance) rather than inherent malicious capability within the fragment.
Confidence: 28%Severity: 40%
Audit Metadata