# Manage Python Projects with uv

Python dependency management can be slow and inconsistent across environments. This skill guides uv workflows for project setup, virtual environments, lockfiles, and CI.

## Install

```bash
npx skillstore add activeinferenceinstitute/uv-package-manager
```

## Metadata

- Status: approved
- Slug: activeinferenceinstitute-uv-package-manager
- Skillstore revision: r1
- Version status: missing
- Tree hash: 4227f66cb63aa68213d0d20d7fce5acd4e5e1b5439a0192d53552db9efd4ecb1
- Author: ActiveInferenceInstitute
- GitHub username: ActiveInferenceInstitute
- License: MIT
- Repository: https://github.com/ActiveInferenceInstitute/Journal-Utilities/tree/main/.claude/skills/uv-package-manager
- Ref: d46e62089a6dfc9e14ea02eebd9b8e2ad2dfe1f4
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: blocked
- Manual install advisory: allowed\_with\_warning
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network, filesystem
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/activeinferenceinstitute-uv-package-manager
- Manifest: https://skillstore.pages.dev/api/skills/activeinferenceinstitute-uv-package-manager/manifest

## Capabilities

- Explains when to use uv instead of pip, pip-tools, poetry, or conda.
- Provides workflows for project setup, dependency changes, syncing, locking, and running tools.
- Guides virtual environment creation, activation, and Python version pinning.
- Shows uv patterns for CI, Docker, monorepos, pre-commit, and VS Code.
- Troubleshoots PATH, cache, Python version, dependency conflict, and lockfile issues.

## Use Cases

- Start a Python Project: Create a uv-based project plan with dependencies, dev tools, Python version pinning, and lockfile workflow.
- Optimize CI Builds: Design repeatable CI steps that install uv, sync dependencies, run tests, and reuse cache safely.
- Migrate Existing Dependencies: Move a project from requirements files, pip-tools, or poetry toward uv commands and lockfile practices.

## Prompt Templates

### Create a New uv Project

```
Use the uv package manager skill to plan a new Python project for [application]. Include the Python version, main dependencies, dev tools, and setup steps.
```

### Migrate from pip

```
Use the uv package manager skill to migrate my project from requirements files to uv. Explain the dependency, lockfile, and virtual environment changes.
```

### Build a CI Workflow

```
Use the uv package manager skill to design a CI workflow for [project type]. Include dependency sync, cache strategy, tests, linting, and lockfile checks.
```

### Troubleshoot a Workspace

```
Use the uv package manager skill to diagnose a uv workspace with dependency conflicts, multiple Python versions, and slow CI installs. Provide a safe investigation plan.
```

## Limitations

- It does not execute commands or inspect the local environment by itself.
- Installer commands require user review because some download and run remote scripts.
- Placeholder package names and repository URLs must be replaced before use.
- Current uv behavior should be checked against the latest official documentation.

## Best Practices

- Confirm installer sources and checksums before running installation commands.
- Commit uv.lock and use frozen installs for reproducible builds.
- Prefer uv run for project commands to reduce environment drift.

## Anti Patterns

- Piping remote installer scripts directly into a shell without review.
- Mixing pip, poetry, and uv changes in one project without a migration plan.
- Ignoring lockfile changes after dependency updates.

## Security Audit

- Audited at: 2026-07-07T18:16:35.515\+00:00
- Summary: No prompt injection or hidden malicious intent was found in the reviewed skill content. Most external command findings are Markdown code fence false positives, but the skill includes remote installer commands that pipe scripts into shells and one persistent ~/.bashrc edit. Those risky examples should be replaced with verified installation steps and explicit user approval.

## Stats

- Views: 227
- Downloads: 13
- Favorites: 0
- Popularity score: 0