Manage Python Projects with uv
Python dependency management can be slow and inconsistent across environments. This skill guides uv workflows for project setup, virtual environments, lockfiles, and CI.
Do not auto-install this skill.
The canonical policy requires operator review before any installation action.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "uv-package-manager" from https://skillstore.io/skills/activeinferenceinstitute-uv-package-manager.md and its manifest at https://skillstore.io/api/skills/activeinferenceinstitute-uv-package-manager/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "uv-package-manager". I have a Python service with slow dependency installs in CI.
Expected outcome:
The skill returns a uv-based CI plan with caching, frozen dependency sync, test execution, and lockfile checks.
Using "uv-package-manager". I want to migrate a requirements-based project to uv.
Expected outcome:
The skill outlines migration steps, dependency grouping, lockfile creation, virtual environment setup, and compatibility notes.
Using "uv-package-manager". My team needs one workflow for local development and Docker builds.
Expected outcome:
The skill compares local, CI, and container workflows and recommends consistent uv commands for each environment.
No prompt injection or hidden malicious intent was found in the reviewed skill content. Most external command findings are Markdown code fence false positives, but the skill includes remote installer commands that pipe scripts into shells and one persistent ~/.bashrc edit. Those risky examples should be replaced with verified installation steps and explicit user approval.
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/activeinferenceinstitute-uv-package-manager/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/activeinferenceinstitute-uv-package-manager?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/activeinferenceinstitute-uv-package-manager?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/activeinferenceinstitute-uv-package-manager/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/activeinferenceinstitute-uv-package-manager.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>ActiveInferenceInstitute. (2026). uv-package-manager security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/activeinferenceinstitute-uv-package-manager/audits/10@techreport{activeinferenceinstitute-activeinferenceinstitute-uv-package-manager-2026,
author = {ActiveInferenceInstitute},
title = {uv-package-manager security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/activeinferenceinstitute-uv-package-manager/audits/10},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "uv-package-manager security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
- name: "ActiveInferenceInstitute"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/activeinferenceinstitute-uv-package-manager/audits/10"
identifiers:
- type: other
value: "skillstore:activeinferenceinstitute-uv-package-manager:audit:10"
description: "Skillstore immutable audit report identifier"
Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
wshobson-uv-package-manager
2026-09-09
activeinferenceinstitute-uv-package-manager
2026-09-09
sickn33-uv-package-manager
2026-09-09
Create a uv-based project plan with dependencies, dev tools, Python version pinning, and lockfile workflow.
Design repeatable CI steps that install uv, sync dependencies, run tests, and reuse cache safely.
Move a project from requirements files, pip-tools, or poetry toward uv commands and lockfile practices.
Use the uv package manager skill to plan a new Python project for [application]. Include the Python version, main dependencies, dev tools, and setup steps.
Use the uv package manager skill to migrate my project from requirements files to uv. Explain the dependency, lockfile, and virtual environment changes.
Use the uv package manager skill to design a CI workflow for [project type]. Include dependency sync, cache strategy, tests, linting, and lockfile checks.
Use the uv package manager skill to diagnose a uv workspace with dependency conflicts, multiple Python versions, and slow CI installs. Provide a safe investigation plan.
Author
ActiveInferenceInstituteLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
d46e62089a6dfc9e14ea02eebd9b8e2ad2dfe1f4
Maintenance freshness
7/18/2026
Usage
9 downloads · 227 views
File structure
📄 SKILL.md
Build Reliable Python Test Suites
Python teams need consistent tests that cover behavior without slowing delivery. This skill provides practical pytest patterns for fixtures, mocking, async code, coverage, and CI.
Package Python Projects for Distribution
Python packaging choices are easy to misconfigure. This skill gives structured examples for layouts, metadata, builds, publishing, and release checks.
Optimize Python Performance
Slow Python code is hard to improve without clear measurements. This skill guides Claude, Codex, and Claude Code through profiling, benchmarking, and targeted optimization patterns.
Build SurrealDB Python Applications
SurrealDB projects often need one guide for documents, graph traversal, vectors, and live queries. This skill gives Python-focused patterns for designing, querying, and tuning multi-model database features.
Build Async Python Applications
Async Python code can be hard to structure, test, and debug. This skill provides patterns for asyncio, concurrency, timeouts, queues, rate limits, and async testing.
Build Cohere v2 Entity Extraction
Teams need reliable structured data from unstructured text. This skill shows how to use Cohere v2 Python and JSON Schema mode for validated extraction.
Automate DevOps Pipelines and Deployments
by alirezarezvani
DevOps work often requires repeatable pipeline, infrastructure, and deployment patterns. This skill provides scripts and reference guides for CI/CD, IaC, deployment, and operations review.
Coordinate Cloud DevOps Workflows
by sickn33
Cloud delivery work often spans many tools and phases. This skill organizes infrastructure, CI/CD, Kubernetes, monitoring, security, costs, and recovery work into clear prompts.
Audit Python Web Apps Before Release
by glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
Build Reliable Async Python
by 0xDarkMatter
Async Python code often fails due to blocking calls, unbounded tasks, and weak cleanup. This skill provides reusable asyncio patterns, examples, and references for robust concurrent services.
Build FastAPI APIs with Reusable Patterns
by 0xDarkMatter
FastAPI projects need consistent choices for validation, dependencies, middleware, and background work. This skill gives Claude, Codex, and Claude Code reusable patterns for practical Python API development.
Add Python Type Safety Patterns
by 0xDarkMatter
Python type annotations can be hard to apply consistently across real projects. This skill gives Claude, Codex, and Claude Code practical patterns for safer typed Python code.