uv-package-manager
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents the official installation procedure for the uv tool using scripts from astral.sh. These commands download and execute code from a well-known service provider in the Python ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates workflows that involve reading and processing project dependency files, creating an attack surface for instructions embedded in external files. 1. Ingestion points: Reads project metadata and dependency lists from pyproject.toml, uv.lock, and requirements.txt mentioned in SKILL.md. 2. Boundary markers: No specific delimiting instructions or ignore directives are provided for handling untrusted file content. 3. Capability inventory: The guide includes commands for writing project files (uv init), managing packages (uv add), and executing code within environments (uv run). 4. Sanitization: Execution relies on standard tool-level parsing of structured configuration formats.
Recommendations
- HIGH: Downloads and executes remote code from: https://astral.sh/uv/install.sh - DO NOT USE without thorough review
Audit Metadata