uv
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides commands to download and execute the official installation scripts for the
uvtool fromastral.sh(e.g.,curl -LsSf https://astral.sh/uv/install.sh | sh). This is the documented and standard installation method for this well-known service. - [COMMAND_EXECUTION]: The skill utilizes
uvto manage Python environments and execute project-specific commands such asuv run,uv sync, anduv add. These commands are standard for the tool's intended purpose. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the
uvbinary and project dependencies through theuvpackage manager from official repositories. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it processes repository files like
pyproject.tomlanduv.lockto determine the project state. - Ingestion points: Reads
pyproject.tomlanduv.lockas indicated inSKILL.mdtriggers. - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Executes arbitrary Python code or CLI tools within the project environment via
uv run(documented inSKILL.md). - Sanitization: Relies on the
uvtool's internal parsing logic for configuration files.
Audit Metadata