yahoo-finance

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the uv package manager using curl or PowerShell from the official astral.sh domain. These are well-known installation methods for an established developer tool.
  • [COMMAND_EXECUTION]: Instructions are included to make the script executable using chmod and to create a symlink in a standard system directory for easier access.
  • [REMOTE_CODE_EXECUTION]: While automated scanners detected a 'curl | sh' pattern, this is an official installation script for a trusted developer tool (uv) from its primary domain.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 09:37 AM