python-uv — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited python-uv (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Always use uv for all package management and script execution tasks.
uv add <package> to install dependencies.uv remove <package> to uninstall dependencies.uv sync to install dependencies from lockfiles or requirements.uv venv to manage virtual environments automatically.uv run <script.py>.uv run <tool>.pip, poetry, pip-tools, or virtualenv commands directly.Always explicitly annotate function return types, including -> None.
Import from typing only for advanced features not available in built-ins (e.g., Any, Callable, Self, Literal, overload).
Use built-in lowercase types for hints (list[int], dict[str, int], tuple[str, int], type[MyClass]). Do not use typing.List, typing.Dict, typing.Tuple, or typing.Type.
Use the pipe operator | for unions and optionals (e.g., int | None, str | int) instead of typing.Union or typing.Optional.
Use the type keyword for type aliases (e.g., type UserID = int).
Use pathlib.Path for all file system interactions. Avoid os.path and os.walk.
Use match and case statements over complex if/elif/else chains or isinstance checks.
Use f-strings for all string formatting. Avoid % formatting and .format().
Use the walrus operator := for assignment expressions inside conditions.
Use @dataclass (with slots=True when possible) for classes that primarily store data. Use enum.StrEnum or enum.IntEnum for constant enumerations.
Assume the use of Ruff for linting and formatting. Write code that complies with standard Ruff rules (sorted imports, standard whitespace).
Use Google-style docstrings for all complex functions and classes.
FastAPI. Avoid Flask or Django for new projects.loguru instead of the built-in logging module.async and await for I/O-bound operations. Use asyncio.run() for entry points.with statements (context managers).~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.