uv-package-manager
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the uv installation scripts and Docker images from official vendor sources.
- Fetches installation scripts from
https://astral.sh/uv/install.shandhttps://astral.sh/uv/install.ps1. - References the official Docker image
ghcr.io/astral-sh/uv:latest. - [REMOTE_CODE_EXECUTION]: The skill describes methods to install the tool by piping remote scripts to the shell.
- Instructions include
curl -LsSf https://astral.sh/uv/install.sh | shfor macOS/Linux systems. - Instructions include
powershell -c "irm https://astral.sh/uv/install.ps1 | iex"for Windows systems. - These are the documented, official installation procedures provided by the vendor (Astral) for the uv package manager.
Audit Metadata