Skills
Navigate
skills/ai-hpc/claude-scholar/uv-package-manager/Gen Agent Trust Hub

uv-package-manager

Fail

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The guide includes installation instructions that download and execute shell and PowerShell scripts directly from the official developer domain (https://astral.sh/uv/install.sh and install.ps1). This is a standard installation pattern for modern CLI tools.
  • [PERSISTENCE]: Troubleshooting steps suggest adding the tool's binary location to the user's shell profile (~/.bashrc), which is a persistence mechanism used to maintain the tool's availability across system restarts and new shell sessions.
  • [COMMAND_EXECUTION]: The skill describes the use of uv run and uv sync, which facilitate the execution of arbitrary Python scripts and the installation of third-party packages from public registries and version control systems.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to read and act upon project configuration files, creating a potential surface for indirect prompt injection.
  • Ingestion points: pyproject.toml, requirements.txt, and uv.lock files.
  • Boundary markers: Absent; the skill does not specify delimiters or instructions to ignore embedded commands in these files.
  • Capability inventory: Full subprocess execution via uv run and network/file-write access via uv add and uv sync.
  • Sanitization: Absent; the content of configuration files is processed without explicit validation or escaping of natural language components.
Recommendations
  • HIGH: Downloads and executes remote code from: https://astral.sh/uv/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 18, 2026, 03:43 PM