python-package-management
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Includes instructions to download the
uvpackage manager via a curl-to-shell command fromastral.sh(curl -LsSf https://astral.sh/uv/install.sh | sh). - [REMOTE_CODE_EXECUTION]: While the skill documents a remote script execution pattern for installation, the source
astral.shis the official domain of the well-known developer of the tools being documented (Astral). This is considered an informative reference for a well-known service in the context of tool installation. - [COMMAND_EXECUTION]: Provides numerous common build and management commands for local development (e.g.,
uv sync,uv build,ruff check), which are standard practices for Python development. - [SAFE]: No malicious obfuscation, credential theft, or unauthorized persistence mechanisms were detected. The skill follows standard industry best practices for modern Python development.
Audit Metadata