uv-package-manager
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download installation scripts and Docker images from official Astral and GitHub Container Registry domains.- [REMOTE_CODE_EXECUTION]: Installation workflows involve piping remote scripts from the vendor's official website (astral.sh) directly into the shell (sh or PowerShell), which is the standard distribution method for this tool.- [COMMAND_EXECUTION]: The core functionality relies on shell commands for initializing projects, managing virtual environments, and installing Python packages through the uv CLI.
Audit Metadata