uv
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads installation scripts from https://astral.sh/uv/install.sh and https://astral.sh/uv/install.ps1. These are the official distribution points for the uv package manager.
- [REMOTE_CODE_EXECUTION]: The skill executes remote scripts by piping the output of curl to sh (Unix) and Invoke-RestMethod to Invoke-Expression (Windows). This is the standard, documented installation method for the uv tool.
- [COMMAND_EXECUTION]: The skill executes shell commands to check for the presence of the uv binary, verify its version, and update the PATH environment variable within the current session to ensure the tool is immediately available for use.
Audit Metadata