l0-test
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill executes a script downloaded from a remote source to install development tools. * Evidence: The script runs
curl -LsSf "https://astral.sh/uv/${UV_VERSION}/install.sh" | shinside a container to install theuvpackage manager. * Context: The download targets a well-known service (Astral) and occurs within an isolated Docker environment. - [EXTERNAL_DOWNLOADS]: The skill retrieves software and environment configurations from external registries. * Evidence: It pulls a PyTorch Docker image from the NVIDIA Container Registry (
nvcr.io) and downloads theuvinstaller fromastral.sh. - [COMMAND_EXECUTION]: The skill uses local CLI tools to manage the development environment and run tests. * Evidence: It executes
gitcommands (e.g.,git diff,git ls-files) to identify changed files,docker runto execute the test suite, anduvto manage Python dependencies and linting.
Audit Metadata