uv-tool-management
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Documents installation of Python packages from PyPI, Git repositories, and direct URLs using 'uv tool install'. Examples include reputable sources like the Astral-sh GitHub repository.
- [COMMAND_EXECUTION]: Provides instructions for executing global CLI tools and ephemeral commands via 'uvx' (also known as uv tool run).
- [PERSISTENCE]: Includes guidance on modifying shell configuration files such as .bashrc or .zshrc to include the uv binary directory in the system PATH, which is standard procedure for CLI tool installation.
- [INDIRECT_PROMPT_INJECTION]: Documents a surface for processing user-supplied tool names and repository URLs. 1. Ingestion points: User-provided package names or Git URLs in 'uv' commands. 2. Boundary markers: Absent in provided examples. 3. Capability inventory: Subprocess execution of 'uv tool install' and 'uvx'. 4. Sanitization: Not explicitly present in skill instructions, relying on the underlying 'uv' utility.
Audit Metadata