uv

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill includes documentation for installing the 'uv' tool by downloading and executing shell and PowerShell scripts directly from the official astral.sh domain.
  • [EXTERNAL_DOWNLOADS]: Instructions and metadata reference external resources including the official documentation at docs.astral.sh, the source repository on GitHub, and the package index on PyPI.
  • [COMMAND_EXECUTION]: The skill provides a comprehensive library of command-line examples for managing Python versions, creating projects, synchronizing dependencies, and executing tools using the 'uv' CLI.
  • [SAFE]: The included utility script 'scripts/check-updates.py' is a maintenance tool designed to verify file integrity and check for version updates from PyPI using standard network requests to official APIs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:30 AM
Security Audit — agent-trust-hub — uv