uv-advanced-dependencies

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate documentation and usage examples for the uv package manager, covering scenarios like Git dependencies, local path dependencies, and private index configuration.- [SAFE]: The skill includes explicit security guidance, advising users to use environment variables for private tokens and to avoid committing sensitive information to version control via .gitignore.- [EXTERNAL_DOWNLOADS]: The skill references standard package installation procedures from well-known sources such as PyPI and GitHub, which are necessary for its intended functionality.- [COMMAND_EXECUTION]: The skill uses the Bash tool to perform dependency management tasks (e.g., uv add, uv sync), which aligns with its primary purpose and the allowed-tools configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 05:51 PM
Security Audit — agent-trust-hub — uv-advanced-dependencies