dependency-management
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions for installing the
uvpackage manager using a shell script fromhttps://astral.sh/uv/install.shpiped to the shell. This is a common and official installation method provided by the developers of the tool. - [EXTERNAL_DOWNLOADS]: The guide references several standard third-party tools for dependency auditing and SBOM generation, such as
pip-audit,npm audit,govulncheck,cargo-audit, andsyft. These are reputable utilities used by developers for maintaining software supply chain security and are fetched from official sources.
Audit Metadata