py-modernize
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an installation script from
astral.sh, which is the official domain for Astral, the developer of theuvtool. This is a legitimate source for the software described in the skill. - [REMOTE_CODE_EXECUTION]: A shell pipe installation pattern (
curl | sh) is included in the documentation as a potential installation method. However, the skill explicitly marks this as "not recommended" and provides safer alternatives such as using system package managers. - [COMMAND_EXECUTION]: The skill utilizes several CLI utilities (
uv,pyupgrade,ruff) and shell commands (rm,git) to perform its primary function of upgrading Python syntax and configuration files. These commands are transparent and consistent with the skill's modernization objectives. - [COMMAND_EXECUTION]: The instructions involve installing software using system package managers, which may require elevated permissions (e.g.,
sudo zypper install uv). This is a standard requirement for system-wide tool installation.
Audit Metadata