审计历史
uv-package-manager - 4 审计
审计版本 4
最新 安全Jan 17, 2026, 08:41 AM
Documentation-only skill teaching uv package manager usage. Static findings detected shell pipe patterns and PowerShell commands which are the official installation methods from astral.sh. All detected patterns are standard documentation for legitimate software installation and represent false positives.
风险因素
⚙️ 外部命令 (3)
🌐 网络访问 (2)
📁 文件系统访问 (2)
审计版本 3
安全Jan 17, 2026, 08:41 AM
Documentation-only skill teaching uv package manager usage. Static findings detected shell pipe patterns and PowerShell commands which are the official installation methods from astral.sh. All detected patterns are standard documentation for legitimate software installation and represent false positives.
风险因素
⚙️ 外部命令 (3)
🌐 网络访问 (2)
📁 文件系统访问 (2)
审计版本 2
严重Jan 4, 2026, 04:39 PM
The skill documentation contains download-and-execute patterns (curl | sh and PowerShell remote execution) that pose security risks, along with shell profile modification commands that could be used for persistence.
严重问题 (3)
风险因素
⚙️ 外部命令 (3)
检测到的模式
审计版本 1
严重Jan 4, 2026, 04:39 PM
The skill documentation contains download-and-execute patterns (curl | sh and PowerShell remote execution) that pose security risks, along with shell profile modification commands that could be used for persistence.