uv-package-manager
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation instructions include commands that download and execute scripts directly from astral.sh (e.g.,
curl ... | shandirm ... | iex). These are the official, standard installation methods for the well-known uv package manager. - [EXTERNAL_DOWNLOADS]: The skill references and links to the official GitHub repository and documentation for the uv project, which is maintained by the well-known Astral organization.
Audit Metadata