using-python-engineering
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions for installing the
uvtool using a piped shell script fromastral.sh, which is the official and widely accepted installation method for this utility. - [EXTERNAL_DOWNLOADS]: The documentation references and recommends various well-known developer tools and hooks hosted on GitHub, which is standard practice for modern Python project orchestration.
- [INDIRECT_PROMPT_INJECTION]: The skill interprets user symptoms to provide relevant documentation. As a purely informational routing tool without executive capabilities over sensitive data, it does not present a significant injection risk.
Audit Metadata