uv-python-versions
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for the 'uv' package manager. All documented commands (uv python install, uv run, uv venv) are standard operations for Python environment management.
- [EXTERNAL_DOWNLOADS]: The skill mentions downloading Python interpreters. Per the TRUST-SCOPE-RULE, these references to official Python distributions and the Astral (uv) documentation are considered safe.
- [COMMAND_EXECUTION]: Uses allowed tools (Bash, Read, Grep, Glob) for legitimate tasks such as checking versions, initializing projects, and managing local file directories (~/.local/share/uv/).
- [INDIRECT_PROMPT_INJECTION]: The skill defines how to interact with project configuration files like pyproject.toml. While these are external inputs, the risk is minimal and consistent with the primary purpose of a build tool manager.
Audit Metadata