dev-swarm-python
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains instructions to download and execute shell and PowerShell scripts directly from the internet to install the 'uv' package manager.
- Evidence:
curl -LsSf https://astral.sh/uv/install.sh | sh(macOS/Linux installer). - Evidence:
powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"(Windows installer). - Context: These are the official installation methods for 'uv', a well-known performance-focused Python tool provided by Astral.
- [COMMAND_EXECUTION]: The skill executes local CLI commands to manage the Python environment and verify installation.
- Evidence:
uv --versionused for checking existing installation. - Evidence:
uv initanduv python pin 3.12for project initialization. - [EXTERNAL_DOWNLOADS]: Fetches installation assets from a well-known service domain (
astral.sh). - Source:
https://astral.sh/uv/install.sh
Audit Metadata