uv-package-manager
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the uv installation script from
astral.sh, which is the official domain for the Astral organization's tools. - [REMOTE_CODE_EXECUTION]: Includes standard shell and PowerShell installation patterns (
curl | shandirm | iex) to install the uv tool directly from its official and well-known source.
Audit Metadata