python-build-tools

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFENO_CODEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [NO_CODE]: The skill consists of Markdown documentation and reference materials without any executable scripts or binary files.
  • [EXTERNAL_DOWNLOADS]: The documentation includes instructions for downloading the uv package manager from its official source at https://astral.sh/uv/install.sh.
  • [REMOTE_CODE_EXECUTION]: Describes the standard installation method for the uv tool, which involves piping a remote script from a well-known service to a shell.
  • [COMMAND_EXECUTION]: Provides guidance on utilizing command-line tools such as uv, ruff, basedpyright, and pytest for project setup and development tasks.
  • [SAFE]: Indirect prompt injection surface exists as the instructions involve processing configuration files (pyproject.toml, .mise.toml) that define execution tasks.
  • Ingestion points: pyproject.toml, .mise.toml, .env
  • Boundary markers: Not specified in documentation
  • Capability inventory: uv run, mise run, pytest, ruff, basedpyright
  • Sanitization: None
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 12:23 PM
Security Audit — agent-trust-hub — python-build-tools