dev-swarm-python

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill contains instructions to download and execute shell and PowerShell scripts directly from the internet to install the 'uv' package manager.
  • Evidence: curl -LsSf https://astral.sh/uv/install.sh | sh (macOS/Linux installer).
  • Evidence: powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex" (Windows installer).
  • Context: These are the official installation methods for 'uv', a well-known performance-focused Python tool provided by Astral.
  • [COMMAND_EXECUTION]: The skill executes local CLI commands to manage the Python environment and verify installation.
  • Evidence: uv --version used for checking existing installation.
  • Evidence: uv init and uv python pin 3.12 for project initialization.
  • [EXTERNAL_DOWNLOADS]: Fetches installation assets from a well-known service domain (astral.sh).
  • Source: https://astral.sh/uv/install.sh
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 08:28 PM