NYC

uv-package-manager

Fail

Audited by Socket on Feb 15, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

BENIGN: The fragment is a documentation/skill description for uv and does not contain executable code or covert data flows. Installation instructions reference external scripts but are standard for distribution. Primary risk concerns are standard supply-chain due-diligence checks (verify domain authenticity and repository provenance) rather than inherent malicious capability within the fragment.

Confidence: 28%Severity: 40%
Audit Metadata
Analyzed At
Feb 15, 2026, 08:49 PM
Package URL
pkg:socket/skills-sh/ovachiever%2Fdroid-tings%2Fuv-package-manager%2F@eebd20ee9c030eb0e1995ed4d8f3423a9af621de