jfrog/jfrog-skills

AI agent skills for the JFrog Platform. Search and download artifacts, query CVEs and exposures, check curation and compliance, trace builds, and more. Install in your AI coding agent and interact with JFrog through natural language.

View scanned commit on GitHubopen_in_new

0%Static score

74% score26% score gap

Highest finding: High severity

Latest scan

high severity

Static analysis score

View full report AI review Rescan repository

Install decision

Needs Manual Review

The scan is usable, but install-time behavior still needs a human look before any agent install step.

Scan identity

Scanned: 2026-08-08
Commit: c28688f792b1
License: Apache-2.0
Repository: Active

Repository scan summary

policyFindings: 34
terminalInstall surface: 2
Repository reach: 19

Highest-priority findings

The latest default-branch scan, ordered by severity.

Full report

highCopying files to external/network locationskills/jfrog-package-safety-and-download/SKILL.md:162
highTrick user directiveskills/jfrog-package-safety-and-download/SKILL.md:122
highCopying files to external/network locationskills/jfrog/SKILL.md:150
highTrick user directiveskills/jfrog/SKILL.md:446
highToken limit exceededskills/jfrog/SKILL.md

Share this trust result

The badge stays linked to the latest default-branch scan for this skill path.

Scan your skill

Do you consider this skill safe to use?

Community signals help prioritize human review; they do not change the scan verdict.

AI Skill Shield is an automated pre-install review, not a guarantee of safety. Confirm sensitive permissions and execution paths before installation.