Skill audit report
jfrog-reference-architecture Audit report.
Guides JFrog Platform topology, sizing (RPM, t-shirt templates), deployment, multi-site use cases, SaaS vs self-managed, HA, air-gapped, and disaster recovery using the official Reference Architecture site as the sole source of facts. Use this skill when the user asks how to size Artifactory or Xray, which deployment pattern to choose, single vs multi site, active-active, active-passive, CI/CD separation, Helm/Kubernetes install planning, or reference architecture (live WebFetch from jfrog.com/reference-architecture). Do NOT use for artifact search or download, repository or permission admin, CVE or vulnerability lookups, live jf CLI operations against their instance, or package curation — use the jfrog base skill or jfrog-package-curation instead.
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
FAIL30
22 GitHub stars
Stars/forks activity
FAIL37
22 stars, 10 forks; issue activity unavailable in current metadata
Recent maintenance
PASS88
2mo since push
License clarity
PASS86
Apache-2.0
README/SKILL.md completeness
PASS86
Metadata includes enough usage and workflow context
Dependency/runtime risk
WARN56
command execution surface, network or browser surface
Install availability
PASS92
npx skills add jfrog/jfrog-skills --skill jfrog-reference-architecture
Install command safety
PASS92
standard package or runtime install path
Permission surface
FAIL36
shell or command execution, filesystem or document access
Repository evidence
PASS86
https://github.com/jfrog/jfrog-skills/tree/main/skills/jfrog-reference-architecture
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add jfrog/jfrog-skills --skill jfrog-reference-architecture
Repository
88
https://github.com/jfrog/jfrog-skills/tree/main/skills/jfrog-reference-architecture
License
86
Apache-2.0
Maintenance
88
2mo since push
AI review
55
Skill depends on live network fetches; if WebFetch is blocked or the site is unavailable, the skill cannot function without user-provided content.
README/SKILL.md completeness
86
Usable description available
Dependency risk
56
command execution surface, network or browser surface
Install command safety
92
standard package or runtime install path
Permission surface
36
shell or command execution, filesystem or document access
Stars/forks activity
37
22 stars, 10 forks; issue activity unavailable in current metadata
Adoption
42
22 GitHub stars
Warnings
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- Skill depends on live network fetches; if WebFetch is blocked or the site is unavailable, the skill cannot function without user-provided content.
- Low GitHub adoption signal
- Quality score needs review
- Permission surface needs review: shell or command execution, filesystem or document access
- GitHub adoption: 22 GitHub stars
- Stars/forks activity: 22 stars, 10 forks; issue activity unavailable in current metadata
- Dependency/runtime risk: command execution surface, network or browser surface
- Permission surface: shell or command execution, filesystem or document access
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options