uv-package-manager
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]:
- Fetches installer scripts from the official Astral domain:
https://astral.sh/uv/install.shandhttps://astral.sh/uv/install.ps1. - References the official project repository on GitHub:
https://github.com/astral-sh/uv.- [COMMAND_EXECUTION]: - Provides standard shell and PowerShell commands for tool installation and environment management.
- Instructs users to use
uv runfor executing Python scripts and developer tools within isolated environments. - Includes a PowerShell command using
-ExecutionPolicy Bypass, which is a standard requirement for running installation scripts in restricted environments.- [SAFE]: - No malicious patterns, obfuscation, or data exfiltration attempts were detected.
- The skill includes security best practices, such as explicitly advising the user to review the content of downloaded installer scripts before execution.
- All external resources are official and trace back to the well-known vendor's infrastructure.
Audit Metadata