py-packaging
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the uv installation script from astral.sh, which is the official domain for Astral's Python tooling. This is a well-known service in the Python ecosystem.
- [REMOTE_CODE_EXECUTION]: Includes instructions for the standard installation pattern of piping a remote script from astral.sh directly into a shell environment (sh for Linux/macOS or PowerShell for Windows). This is a common practice for installing modern developer utilities.
- [COMMAND_EXECUTION]: Provides guidance on executing various CLI tools for Python development, such as uv, ruff, hatch, and pytest, to initialize projects, manage dependencies, and run automated tests.
- [DATA_EXFILTRATION]: Mentions publishing packages to the official Python Package Index (PyPI) using
uv publishortwine. This functionality is part of the skill's primary purpose for distribution and targets the legitimate industry-standard registry.
Audit Metadata