python-dev
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The setup instructions in
references/setup.mdinclude downloading and executing the official installation script for theuvtool fromhttps://astral.sh/uv/install.sh. This is an expected and documented procedure for this well-known development utility. - [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data which could potentially contain malicious instructions.
- Ingestion points: Project source code,
pyproject.toml, and.pre-commit-config.yamlas described inSKILL.mdandreferences/lint-rules.md. - Boundary markers: None identified.
- Capability inventory: Execution of development tools (
ruff,pytest,pip-audit,playwright) via theuvsubprocess runner as specified inreferences/verification.md. - Sanitization: None identified, as the skill operates on local project files within a development workflow.
Audit Metadata