install-deps

Pass

Audited by Gen Agent Trust Hub on May 27, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill fetches and executes the installation script for 'uv' from Astral's official domain (https://astral.sh/uv/install.sh). As a well-known technology provider, this is a standard method for installing the tool.
  • [COMMAND_EXECUTION]: The skill uses system package managers such as 'apt', 'brew', 'dnf', and 'pacman' to install binary dependencies like ImageMagick and exiftool.
  • [COMMAND_EXECUTION]: The skill employs 'sudo' to obtain the necessary privileges for installing system-wide packages via package managers.
  • [EXTERNAL_DOWNLOADS]: The skill installs several standard image processing libraries, including 'Pillow', 'imagehash', 'numpy', 'cairosvg', and 'vtracer', from the official Python Package Index (PyPI).
Audit Metadata
Risk Level
SAFE
Analyzed
May 27, 2026, 04:27 PM
Security Audit — agent-trust-hub — install-deps