uv-workflow
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to use the
Bashtool to executeuvcommands for running Python code, modules, and standalone scripts. This is the primary mechanism for script execution and environment management within this skill. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of Python packages from the official PyPI registry through
uvcommands such asuv addoruv run --with. This behavior is consistent with the intended purpose of managing Python dependencies using a well-known service. - [SAFE]: The skill implements best practices by recommending the configuration of
UV_CACHE_DIRfor temporary storage in restricted or sandboxed environments and utilizinguvto maintain interpreter and environment integrity instead of direct Python shell invocations.
Audit Metadata