uv-package-manager
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documentation includes official installation scripts for the uv package manager, such as 'curl -LsSf https://astral.sh/uv/install.sh | sh'. These scripts are hosted on the tool vendor's official domain and represent the standard, documented method for installing the software.\n- [EXTERNAL_DOWNLOADS]: References external resources including the official Astral installation scripts and GitHub Actions ('astral-sh/setup-uv@v2'). These sources are well-known and trusted for the purpose of software distribution and development workflow integration.\n- [COMMAND_EXECUTION]: Provides a variety of shell commands for using the uv tool, including project initialization, package installation, and environment management. All commands are standard for the tool's functionality and aligned with the skill's instructional purpose.
Audit Metadata