uv-package-manager
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The implementation playbook provides official installation instructions for the uv tool using remote scripts.
- Evidence: The skill references
https://astral.sh/uv/install.shandhttps://astral.sh/uv/install.ps1for installation. These are well-known official endpoints for the Astral organization. - [COMMAND_EXECUTION]: The skill provides numerous command-line examples for managing Python projects, virtual environments, and package resolution.
- Evidence: Multiple code blocks in
resources/implementation-playbook.mddemonstrate the use ofuv init,uv add,uv venv, anduv runto perform system-level package management tasks. - [EXTERNAL_DOWNLOADS]: The skill references official containers and repositories for integration.
- Evidence: References to
ghcr.io/astral-sh/uv:latestfor Docker builds and the official GitHub repositorygithub.com/astral-sh/uvare included.
Audit Metadata