ClawHub
Back to skill

Security audit

uv-package-manager

Security checks for vulnerabilities and agentic risk

Overview

This skill is a uv usage guide whose commands fit its purpose, though its quick installer examples should be handled carefully.

Prefer pip, Homebrew, cargo, or a verified release when installing uv. If using the curl or PowerShell installer examples, download and inspect the script first, confirm it comes from the official uv source, and avoid copy-pasting remote-script execution into sensitive environments.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The skill explicitly recommends piping a remotely fetched installer script directly into a shell/PowerShell interpreter without any integrity verification, review step, or warning. This is dangerous because compromise of the upstream host, DNS/TLS interception, or a malicious update could lead to arbitrary code execution on the user's machine immediately at install time.

External Script Fetching

Low
Category
Supply Chain
Content
```bash
# macOS/Linux
curl -LsSf https://astral.sh/uv/install.sh | sh

# Windows (PowerShell)
powershell -c "irm https://astral.sh/uv/install.ps1 | iex"
Confidence
96% confidence
Finding
The command fetches an external script from the internet and immediately executes it. Even though this is a common installer pattern, embedding it in a skill normalizes unsafe behavior and exposes users to supply-chain compromise and arbitrary code execution if the remote content is altered.

Chaining Abuse

High
Category
Tool Misuse
Content
```bash
# macOS/Linux
curl -LsSf https://astral.sh/uv/install.sh | sh

# Windows (PowerShell)
powershell -c "irm https://astral.sh/uv/install.ps1 | iex"
Confidence
98% confidence
Finding
The `| sh` construct is a classic command-chaining pattern that turns any network response into immediately executed shell code. In a developer-facing skill, this is especially risky because users may copy-paste it verbatim, granting full execution to unreviewed remote content.

Static analysis

No suspicious patterns detected.