voxtype-install

Pass

Audited by Gen Agent Trust Hub on Aug 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the uv tool via a remote script from astral.sh (curl -LsSf https://astral.sh/uv/install.sh | sh). Astral is a well-known organization in the Python ecosystem, and this is their official installation method.
  • [EXTERNAL_DOWNLOADS]: The skill downloads the voxtype package from PyPI, which is the standard Python package registry.
  • [COMMAND_EXECUTION]: The skill provides commands for the user to run in their terminal, such as uv tool install voxtype, voxtype setup, and voxtype. These are standard operational commands for the described tool.
  • [DATA_EXPOSURE]: The skill mentions reading and writing to a local configuration file at ~/.config/voxtype/config.toml. This is a standard practice for local applications and does not involve exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 5, 2026, 03:56 PM
Security Audit — agent-trust-hub — voxtype-install