python-use

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill defines a strict set of rules for the AI agent to follow when managing Python projects, specifically mandating the use of uv (a well-known, high-performance tool from Astral) to ensure consistency and isolation.
  • [SAFE]: It encourages the use of virtual environments and provides specific configuration for centralized-project-envs, which keeps large environment files outside the project directory while maintaining a local link, reducing the risk of accidental exposure or corruption of the system Python.
  • [SAFE]: The commands provided (e.g., uv init, uv add, uv sync) are standard for the uv ecosystem and do not involve suspicious execution patterns or non-standard registries.
  • [SAFE]: The skill explicitly forbids dangerous practices such as global installations (--system, --user) and usage of unmanaged Python environments, which is a positive security posture.
  • [SAFE]: References to external documentation and source code point to well-known, trusted domains such as astral.sh, github.com, and python.org.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 07:36 AM