pypi-publisher
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No security issues detected. The skill outlines a standard publishing process for Python packages and provides helper scripts to automate testing, building, and uploading package distributions.
- [COMMAND_EXECUTION]: The skill utilizes subprocess commands to run tests via
pytest, build the package usinguv, and upload distributions to PyPI usingtwine. These commands are standard for Python development and are executed on the user's local project files. - [EXTERNAL_DOWNLOADS]: The skill uses
uvxto executetwine, which may involve fetching the tool from the official Python Package Index (PyPI). This is a well-known service and the operation is standard for package management tasks.
Audit Metadata