uv-package-manager
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides standard installation commands that fetch setup scripts from https://astral.sh/uv/install.sh and https://astral.sh/uv/install.ps1. These are the official distribution channels for the uv tool.
- [COMMAND_EXECUTION]: The skill instructs the agent on how to use shell commands for Python package management, including 'uv sync', 'uv run', and 'uv lock'. These operations are performed within the scope of the user's project to manage dependencies and virtual environments.
- [REMOTE_CODE_EXECUTION]: The skill references official Docker images (ghcr.io/astral-sh/uv) and GitHub Actions (astral-sh/setup-uv) from the tool's official repositories to facilitate containerized builds and automated testing.
Audit Metadata