uv-run
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the use of
uvto download Python packages (e.g.,requests,rich) and CLI tools (e.g.,ruff,httpie) from public registries. - [COMMAND_EXECUTION]: Relies on
uv runanduvxto execute scripts and tools within the shell environment. - [INDIRECT_PROMPT_INJECTION]: As the skill interacts with Python scripts that can contain embedded metadata (PEP 723), there is a potential surface for instructions embedded in processed files, though this is a standard risk for development tools and is mitigated by the agent's runtime guardrails.
Audit Metadata