safe yaml for downloaded carts

[test]