uv-package-manager

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the uv installation scripts and Docker images from official vendor sources.
  • Fetches installation scripts from https://astral.sh/uv/install.sh and https://astral.sh/uv/install.ps1.
  • References the official Docker image ghcr.io/astral-sh/uv:latest.
  • [REMOTE_CODE_EXECUTION]: The skill describes methods to install the tool by piping remote scripts to the shell.
  • Instructions include curl -LsSf https://astral.sh/uv/install.sh | sh for macOS/Linux systems.
  • Instructions include powershell -c "irm https://astral.sh/uv/install.ps1 | iex" for Windows systems.
  • These are the documented, official installation procedures provided by the vendor (Astral) for the uv package manager.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 08:50 AM