uv-run

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documents the use of uv to download Python packages (e.g., requests, rich) and CLI tools (e.g., ruff, httpie) from public registries.
  • [COMMAND_EXECUTION]: Relies on uv run and uvx to execute scripts and tools within the shell environment.
  • [INDIRECT_PROMPT_INJECTION]: As the skill interacts with Python scripts that can contain embedded metadata (PEP 723), there is a potential surface for instructions embedded in processed files, though this is a standard risk for development tools and is mitigated by the agent's runtime guardrails.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:12 AM