uv-package-manager

Pass

Audited by Gen Agent Trust Hub on Feb 28, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The implementation playbook provides official installation instructions for the uv tool using remote scripts.
  • Evidence: The skill references https://astral.sh/uv/install.sh and https://astral.sh/uv/install.ps1 for installation. These are well-known official endpoints for the Astral organization.
  • [COMMAND_EXECUTION]: The skill provides numerous command-line examples for managing Python projects, virtual environments, and package resolution.
  • Evidence: Multiple code blocks in resources/implementation-playbook.md demonstrate the use of uv init, uv add, uv venv, and uv run to perform system-level package management tasks.
  • [EXTERNAL_DOWNLOADS]: The skill references official containers and repositories for integration.
  • Evidence: References to ghcr.io/astral-sh/uv:latest for Docker builds and the official GitHub repository github.com/astral-sh/uv are included.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 28, 2026, 11:53 AM