python-use
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a strict set of rules for the AI agent to follow when managing Python projects, specifically mandating the use of
uv(a well-known, high-performance tool from Astral) to ensure consistency and isolation. - [SAFE]: It encourages the use of virtual environments and provides specific configuration for
centralized-project-envs, which keeps large environment files outside the project directory while maintaining a local link, reducing the risk of accidental exposure or corruption of the system Python. - [SAFE]: The commands provided (e.g.,
uv init,uv add,uv sync) are standard for theuvecosystem and do not involve suspicious execution patterns or non-standard registries. - [SAFE]: The skill explicitly forbids dangerous practices such as global installations (
--system,--user) and usage of unmanaged Python environments, which is a positive security posture. - [SAFE]: References to external documentation and source code point to well-known, trusted domains such as
astral.sh,github.com, andpython.org.
Audit Metadata