python-env
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the uv installation script from the official domain (astral.sh). This is a standard installation method for a widely used developer tool and uses the official provider's infrastructure.
- [COMMAND_EXECUTION]: The skill defines patterns for executing standard Python environment management commands using uv, pip, and twine. These instructions facilitate routine tasks such as project initialization, dependency installation, and package publishing.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for managing project configuration files which represent a potential entry point for external data. (1) Ingestion points: pyproject.toml and uv.lock files identified in SKILL.md and references/dependency-management.md. (2) Boundary markers: None identified, as the skill provides shell command templates rather than specialized processing logic. (3) Capability inventory: Includes shell command execution via uv, pip, and twine across all referenced files. (4) Sanitization: None identified.
Audit Metadata