poetry-uv-advisor
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were found in the analyzed files. The skill provides metadata and documentation for optimizing Python projects using standard tools.
- [INDIRECT_PROMPT_INJECTION]: This category is noted due to the skill's data ingestion surface. 1. Ingestion points: Project files (e.g., pyproject.toml) located at the user-provided
project_path. 2. Boundary markers: No delimiters or ignore instructions are defined for the processed file content. 3. Capability inventory: The skill claims to perform automated analysis and integration with Python tooling, though no specific shell command logic is provided in the skill files. 4. Sanitization: No explicit validation or sanitization of external file content is described.
Audit Metadata