uv-package-manager
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads installation scripts and binaries from official sources including astral.sh and github.com/astral-sh. These are the primary distribution channels for the well-known uv tool.\n- [REMOTE_CODE_EXECUTION]: Detailed installation commands utilize the curl-to-shell (curl | sh) and irm-to-iex (PowerShell) patterns. These are the documented official installation methods provided by Astral for the uv tool.\n- [COMMAND_EXECUTION]: The skill playbook contains numerous command-line examples for managing Python environments, installing dependencies, and resolving project structures. All commands are consistent with the tool's intended purpose and legitimate developer workflows.
Audit Metadata