managing-python-with-uv
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure guidelines for secret management, specifically instructing users to keep tokens out of logs and arguments and to use environment variables for package publishing.
- [SAFE]: Command execution patterns using
uv runand dependency management withuv addoruv syncare appropriate for the skill's stated purpose of Python development. - [SAFE]: The packaging and release workflows include explicit authorization gates and verification steps, ensuring that sensitive operations like publishing are not performed automatically.
- [SAFE]: No evidence of prompt injection, obfuscation, or persistence mechanisms was found; the instructions correctly utilize standard Python toolchains.
Audit Metadata