uv-centralized-envs
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run various uv CLI commands, including 'uv sync', 'uv lock', 'uv pip check', and 'uv run', to audit, migrate, and verify the project environments. These are standard operations for the uv environment manager.
- [EXTERNAL_DOWNLOADS]: The workflow includes running 'uv sync --locked', which triggers the download of Python dependencies from the official Python Package Index (PyPI) or other configured registries. This is expected behavior for a dependency management tool.
- [PROMPT_INJECTION]: The skill instructs the agent to read and audit external project files such as 'pyproject.toml', 'uv.lock', and 'AGENTS.md'. While reading untrusted project data is an indirect prompt injection surface, the skill implements these for standard environment configuration and lacks dangerous capabilities that would be exploitable through these files.
- [SAFE]: No malicious patterns such as credential exfiltration, obfuscation, or unauthorized remote code execution were detected. The skill's operations, including the modification of the user-level 'uv.toml' and project-level configuration files, are consistent with its stated purpose of managing Python virtual environments.
Audit Metadata