python
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes an installation command for the
uvpackage manager (curl -LsSf https://astral.sh/uv/install.sh | sh). While this involves a remote download, the source (astral.sh) is a well-known provider of high-performance Python tooling (Astral), and the command is standard installation practice for this tool. - [REMOTE_CODE_EXECUTION]: The aforementioned
uvinstallation command uses a piped execution pattern (curl | sh). This is documented as a setup step for the recommended package manager rather than a hidden or malicious background execution.
Audit Metadata