setup
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the
uvpackage manager installation scripts fromastral.sh, which is a recognized and well-known service for Python development tools. - [REMOTE_CODE_EXECUTION]: The diagnostic workflow includes executing code directly from the vendor's official GitHub repository (
github.com/upbit-official) using theuvxtool. It also documents the standard piped execution commands (curl | sh) for installinguv. - [COMMAND_EXECUTION]: The skill performs local environment checks using commands such as
uv --versionanduv syncto manage virtual environments. The Windows installation sequence foruvuses a PowerShell execution policy bypass, which is a standard procedure for this tool's official installer. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from tool execution outputs (installation logs and help text) to verify setup. While explicit boundary markers are not used, the attack surface is minimal as the data is sourced from the vendor's own verified diagnostic tools.
Audit Metadata