upgrade-python-deps

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS

Full Analysis

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute uv lock, uv sync, uv run mypy, and make test. These commands are standard for Python project maintenance and are explicitly restricted in the allowed-tools configuration.
[EXTERNAL_DOWNLOADS]: Performs package upgrades and installations from the Python Package Index (PyPI) using the uv package manager. This behavior is the primary intended function of the skill and uses a well-known, industry-standard tool.

Audit Metadata

Risk Level

SAFE

Analyzed

Apr 13, 2026, 10:36 PM