setup

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the uv package manager installation scripts from astral.sh, which is a recognized and well-known service for Python development tools.
  • [REMOTE_CODE_EXECUTION]: The diagnostic workflow includes executing code directly from the vendor's official GitHub repository (github.com/upbit-official) using the uvx tool. It also documents the standard piped execution commands (curl | sh) for installing uv.
  • [COMMAND_EXECUTION]: The skill performs local environment checks using commands such as uv --version and uv sync to manage virtual environments. The Windows installation sequence for uv uses a PowerShell execution policy bypass, which is a standard procedure for this tool's official installer.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from tool execution outputs (installation logs and help text) to verify setup. While explicit boundary markers are not used, the attack surface is minimal as the data is sourced from the vendor's own verified diagnostic tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 06:58 AM
Security Audit — agent-trust-hub — setup