uv-workflow

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill guides the agent to use the Bash tool to execute uv commands for running Python code, modules, and standalone scripts. This is the primary mechanism for script execution and environment management within this skill.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of Python packages from the official PyPI registry through uv commands such as uv add or uv run --with. This behavior is consistent with the intended purpose of managing Python dependencies using a well-known service.
  • [SAFE]: The skill implements best practices by recommending the configuration of UV_CACHE_DIR for temporary storage in restricted or sandboxed environments and utilizing uv to maintain interpreter and environment integrity instead of direct Python shell invocations.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 08:00 PM
Security Audit — agent-trust-hub — uv-workflow