uv-advanced-dependencies
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate documentation and usage examples for the
uvpackage manager, covering scenarios like Git dependencies, local path dependencies, and private index configuration.- [SAFE]: The skill includes explicit security guidance, advising users to use environment variables for private tokens and to avoid committing sensitive information to version control via.gitignore.- [EXTERNAL_DOWNLOADS]: The skill references standard package installation procedures from well-known sources such as PyPI and GitHub, which are necessary for its intended functionality.- [COMMAND_EXECUTION]: The skill uses theBashtool to perform dependency management tasks (e.g.,uv add,uv sync), which aligns with its primary purpose and the allowed-tools configuration.
Audit Metadata