uv-centralized-envs
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on executing local
uvCLI commands (e.g.,uv sync,uv lock,uv pip check) to manage and verify Python environments. These commands are executed within the user's environment to perform the stated migration.- [INDIRECT_PROMPT_INJECTION]: The skill ingests and acts upon data from untrusted project files, which could be manipulated to influence the agent's actions. - Ingestion points: Reads
pyproject.toml,uv.lock,.vscode/settings.json, andAGENTS.mdfrom the project directory (SKILL.md, Workflow Step 1 & 2). - Boundary markers: No explicit markers or instructions are used to delimit or ignore potentially malicious content within these files.
- Capability inventory: The skill has the ability to read and modify files (including user-level
uv.toml), move directories (.venv), and execute shell commands via theuvtool. - Sanitization: There is no evidence of sanitization or validation of the content read from these project files before it is used to inform the migration workflow.
Audit Metadata