bioresearcher-python-setup-uv
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONPERSISTENCEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes an installation script for the
uvpackage manager fromastral.sh. Astral is a well-known service in the Python ecosystem, and this is the standard installation method for the tool. - [REMOTE_CODE_EXECUTION]: Includes a fallback mechanism using a GitHub proxy (
ghfast.top) to download theuvbinary, intended for users in regions with limited access to primary GitHub infrastructure. - [PERSISTENCE]: The skill appends environment usage guidelines to project instruction files like
AGENTS.mdorCLAUDE.md. This ensures that subsequent agent sessions continue to use the project-local virtual environment anduvmanager rather than host-level tools. - [EXTERNAL_DOWNLOADS]: Performs automated network latency probes (mirror racing) against established package registries and mirrors, including PyPI, Aliyun, Tsinghua, and USTC, to select the fastest source for dependency installation.
- [INDIRECT_PROMPT_INJECTION]: The skill modifies agent instruction files which create a surface for future behavior influence.
- Ingestion points:
AGENTS.md,CLAUDE.md(via Step 6 inSKILL.md). - Boundary markers: The skill uses explicit HTML comments (
<!-- BEGIN BIORESEARCHER UV ENVIRONMENT GUIDELINES -->) to delimit the added instructions. - Capability inventory: The skill possesses file write/append capabilities, network access via
curl, and shell execution capabilities. - Sanitization: The instructions appended are static, pre-defined blocks and are not derived from untrusted external data.
Audit Metadata