uv-package-manager
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides commands to download installation scripts and components from official vendor sources, including
astral.shand the project's GitHub repository. These are legitimate resources for the 'uv' package manager. - [REMOTE_CODE_EXECUTION]: Installation instructions include piping remote scripts to a shell (e.g.,
curl | shandpowershell | iex). These patterns are provided as standard, user-initiated setup procedures for the tool from its official distribution domain.
Audit Metadata