python
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: In
package-management/SKILL.md, the skill provides instructions for installinguvusing the commandcurl -LsSf https://astral.sh/uv/install.sh | sh. This targets the official installation script from Astral, a well-known organization in the Python ecosystem. - [REMOTE_CODE_EXECUTION]: The skill documents the official Poetry installation method in
package-management/SKILL.mdviacurl -sSL https://install.python-poetry.org | python3 -. This reference points to the project's own established installation infrastructure. - [SAFE]: The skill consistently recommends security best practices, such as using
pip-auditfor vulnerability scanning, utilizing virtual environments to isolate dependencies, and employing Trusted Publishers (OIDC) for secure package distribution to PyPI.
Audit Metadata