uv-package-manager
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides commands to fetch installation scripts and source code from astral.sh and official GitHub repositories.- [REMOTE_CODE_EXECUTION]: The documentation includes instructions for piping remote scripts directly into sh and PowerShell interpreters for tool installation.- [INDIRECT_PROMPT_INJECTION]: The skill interacts with project configuration files which constitutes a potential attack surface for indirect prompt injection.
- Ingestion points: Processes pyproject.toml, requirements.txt, and uv.lock as seen in resources/implementation-playbook.md.
- Boundary markers: None present; the instructions do not implement markers to isolate configuration data from instructions.
- Capability inventory: The skill performs file writing and command execution using uv run, uv add, and uv sync.
- Sanitization: There is no evidence of sanitization for the content loaded from the configuration files.
Audit Metadata