dependency-management

Pass

Audited by Gen Agent Trust Hub on Mar 22, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions for installing the uv package manager using a shell script from https://astral.sh/uv/install.sh piped to the shell. This is a common and official installation method provided by the developers of the tool.
  • [EXTERNAL_DOWNLOADS]: The guide references several standard third-party tools for dependency auditing and SBOM generation, such as pip-audit, npm audit, govulncheck, cargo-audit, and syft. These are reputable utilities used by developers for maintaining software supply chain security and are fetched from official sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 22, 2026, 03:07 PM