Star200+

Jfrog Skills

REVIEW · 64
Community indexed

AI agent skills for the JFrog Platform. Search and download artifacts, query CVEs and exposures, check curation and compliance, trace builds, and more. Install in your AI coding agent and interact with JFrog through natural language.

Downloads0
Stars18
Version1.0.0
Quality68/100 · Promising
Trust64/100 · Sandbox only
Audit78/100 · Needs review

Supply asset profile

Coding and developer agents

Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills.

Browse track

Scenario

GitHub automation

I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

Agent fit

Claude Code + CLI + Codex

Codex, Claude Code, Cursor, CLI, or custom agents.

Install

Ready

npx skills add jfrog/jfrog-skills

Maintenance

fresh

11d since push

Risk

Needs review

Dependency or permission surface needs review

GitHub quality

18

68/100 Quality · 72/100 Trust

Coverage tags

CodingGitHub automationsecurityjfrogcve

Review notes

Dependency or permission surface needs review · Permission surface may require sandboxing

Agent adoption scorecard

Trust, audit, and install readiness at a glance

These scores combine public repository metadata, OpenAgentSkill review signals, maintenance freshness, and install readiness. They are a shortlist signal, not a replacement for human review.

Quality

Promising
68

Useful candidate, but compare it with alternatives before adopting.

Trust

Sandbox only
64

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

Audit

Needs review
78

A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.

OpenAgentSkill Trust Score v5

Human review before install

Run only in a sandbox and compare close alternatives before using it for real work.

ShellCodexClaude CodeCursorOpenAgentSkill CLI

Stars

18 GitHub stars

Repo activity

18 stars, 6 forks

Maintenance

11d since push

License

Apache-2.0

Install

npx skills add jfrog/jfrog-skills

Install safety

standard package or runtime install path

Permission surface

shell or command execution, filesystem or document access

Agent outcomes

No agent outcome data yet

Docs

Strong README/SKILL.md context

Risk summary

Review before production

  • Low GitHub adoption signal
  • Quality score needs review
  • Permission surface needs review: shell or command execution, filesystem or document access
  • GitHub adoption: 18 GitHub stars

Install readiness

Install path available

  • Install path is available
  • Repository evidence is available
  • License is declared
  • No Agent Proven outcome evidence yet

Agent-readable metadata

Machine-readable decision data for this skill.

Use this block or the embedded JSON to decide whether an agent should install this skill, choose an alternative, or ask for human review first.

Open JSON

Suited tasks

  • GitHub automation workflows
  • Claude Code teams
  • builders willing to evaluate younger projects
  • Inspect repository metadata

Suited agents

ShellCodexClaude CodeCursorOpenAgentSkill CLICLI

Install decision

Command
npx skills add jfrog/jfrog-skills
Policy
review
Human review
yes

Trust and risk

Trust
64/100
Audit
78/100
Risk level
Needs review

Outcome loop

Endpoint
/api/agent/outcome
Event ID
resolve
Outcomes
5

Install command

npx skills add jfrog/jfrog-skills
Public auditEval reportResolve APIInstall handoff

Do not use when

  • teams that need a vendor-supported SLA
  • production agents without a repository review
  • Low GitHub adoption signal
  • High-risk permission hints: Shell or command execution
  • Dependency or permission surface needs review

Alternative

Maigret

32.9K Stars

npx skills add soxoj/maigret

Alternative

Nuclei

29.2K Stars

npx skills add projectdiscovery/nuclei

Alternative

Infisical

27.4K Stars

npx skills add Infisical/infisical

Alternative

Wazuh

16.3K Stars

npx skills add wazuh/wazuh

Agent safety v2

46/100 · Avoid automatic install

Experimentalreview

Sparse or mixed signals. Useful for discovery, but not for autonomous installation.

Test manually in an isolated workspace and compare against safer alternatives.

Resolve via API

high

Shell or command execution

Skill metadata references terminal, CLI, shell, subprocess, or command execution workflows.

medium

Network access

Skill likely fetches remote pages, APIs, repositories, or external services.

medium

Filesystem access

Skill may read or write project files, documents, generated artifacts, or local workspace state.

medium

Database access

Skill may inspect schemas, query databases, or work with persistent stores.

  • High-risk permission hints: Shell or command execution
  • Dependency or permission surface needs review

Install targets

Install this skill in your agent workflow

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

skill install

OpenAgentSkill CLI

Use the registry command when your workflow supports the OpenAgentSkill installer.

$ npx skills add jfrog/jfrog-skills

Agent resolve plan

Let an agent verify fit before installing.

The Resolve API returns the selected skill, alternatives, safety policy, audit notes, install target, and copy-paste prompt an agent can follow without scraping this page.

Open text plan

Open JSON

/api/agent/resolve?task=Use%20Jfrog%20Skills%20for%20an%20agent%20workflow&agent=codex&max_risk=medium

Resolve text

/api/agent/resolve?task=Use%20Jfrog%20Skills%20for%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text

Install handoff

/api/skills/jfrog-jfrog-skills/install

Agent should check

  • Task fit and alternatives from Resolve API.
  • Audit score, trust score, and safety policy warnings.
  • Install target compatibility for Codex, Claude Code, Cursor, or CLI.

Copy prompt

Task: Use Jfrog Skills in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20Jfrog%20Skills%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/jfrog-jfrog-skills/install
Install command: npx skills add jfrog/jfrog-skills
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.

Agent handoff

Give an agent the install path, not another directory page.

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

Open install API

Install handoff

/api/skills/jfrog-jfrog-skills/install

LLM text format

/api/skills/jfrog-jfrog-skills/install?format=text

Find alternatives

/api/skills/search?q=Jfrog%20Skills&limit=3

Agent prompt

Use Jfrog Skills for this task. Review https://www.openagentskill.com/api/skills/jfrog-jfrog-skills/install, then install with: npx skills add jfrog/jfrog-skills

Registry metadata

Agent-readable profile for automatic skill selection.

This page exposes the same decision, trust, audit, use-case, and install signals through the Registry API, so agents can rank this skill without scraping the UI.

Open manifest

Manifest

/api/registry/manifest/jfrog-jfrog-skills

LLM text

/api/registry/manifest/jfrog-jfrog-skills?format=text

Install alias

/api/registry/install/jfrog-jfrog-skills

Recommend

/api/registry/recommend?task=Use%20Jfrog%20Skills%20in%20an%20agent%20workflow&limit=3

Agent fit

67/100

GitHub automation

Use-case tags

GitHub automationCoding agentsBrowser automation

Platforms

Shell, Claude Code

Audit report

Needs review · 78/100

A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.

View audit reportView eval report

Agent decision cockpit

Fallback candidate for GitHub automation

Prototype with this skill first; keep a fallback candidate ready.

67
Readiness
Prototype
Stage

Role in stack

Fallback candidate

Primary fit

GitHub automation

Trust label

Prototype first

Install path

Command ready

Use when

  • GitHub automation workflows
  • Claude Code teams
  • builders willing to evaluate younger projects

Evidence

  • recent repository activity
  • install command or GitHub repo available
  • 68/100 quality profile
  • 1 OpenAgentSkill engagement events

review first

  • Low GitHub adoption signal

Implementation path

  1. 1Install it in a sandbox agent and run one GitHub automation task end to end.
  2. 2Compare output quality, latency, and failure behavior against at least one alternative.
  3. 3Promote it into production only after reviewing repository permissions, license, and maintenance signals.

Trust profile

Sandbox only

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

64
OpenAgentSkill Trust Score

GitHub adoption

FIX

18 GitHub stars

Stars/forks activity

FIX

18 stars, 6 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

11d since push

License clarity

PASS

Apache-2.0

Good signals

  • AI review approved
  • Install path is available
  • Repository evidence is available
  • Recently maintained repository
  • Install command has no obvious high-risk pattern
  • Outcome loop is ready but needs first real agent run

Review before install

  • Low GitHub adoption signal
  • Quality score needs review
  • Permission surface needs review: shell or command execution, filesystem or document access
  • GitHub adoption: 18 GitHub stars
  • Stars/forks activity: 18 stars, 6 forks; issue activity unavailable in current metadata
  • Dependency/runtime risk: command execution surface, external package install surface
  • Permission surface: shell or command execution, filesystem or document access
  • No real agent outcome reports yet
  • Human review required before unattended installation

Recommended action

Run only in a sandbox and compare close alternatives before using it for real work.

Quality profile

Promising candidate for agent workflows

Useful candidate, but compare it with alternatives before adopting.

68
GitHub stars
18
Freshness
11d ago
Install ready
Yes
License
Apache-2.0
Review before install: Low GitHub adoption signal

Workflow fit

Use this skill in these scenarios

Manage repositories

GitHub automation

I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

Build and ship code

Coding agents

I need a coding agent that can understand a repository, edit code, and review pull requests.

Operate web apps

Browser automation

I need my agent to control a browser, fill forms, and verify web app workflows.

Workflow fit

Add it to a complete workflow

Inspect, patch, and verify code

Coding review agent

A workflow for software agents that inspect repositories, review pull requests, generate tests, and turn findings into shippable patches.

Operate and verify web apps

Browser QA agent

A workflow for agents that navigate products, fill forms, take screenshots, and verify real user flows across web applications.

Turn skills into distribution

Content growth agent

A workflow for turning newly indexed skills into SEO briefs, social drafts, comparison pages, and reusable publishing workflows.

Alternative shortlist

Compare before you install

Similar skills that may fit this task.

Compare all

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

Adopt
Ready100
Quality100
Stars32.9K

Nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Adopt
Ready100
Quality100
Stars29.2K

Infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Adopt
Ready100
Quality100
Stars27.4K

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Adopt
Ready100
Quality100
Stars16.3K

Overview

# JFrog Skills

> **Beta Notice:** This software is in beta and licensed under the [Apache License 2.0](LICENSE). For clarity: This software is provided "as-is" without warranty of any kind. Behavior, APIs, conventions, and structure may change without notice between releases. JFrog makes no guarantees of backward compatibility during the 0.x release cycle. Use in production environments is at your own risk.

This repository ships AI agent skills for the JFrog Platform:

- **`jfrog`** (required): The base skill covering CLI setup, artifact operations, security queries, AQL, and GraphQL. All other skills depend on it. - **`jfrog-package-safety-and-download`**: A workflow skill for package safety checks and curation-aware downloads. Requires `jfrog`. - **`jfrog-ai-catalog-skills`**: A workflow skill to discover, install, update, and publish agent skills in the JFrog AI Catalog. Requires `jfrog`. - **`jfrog-reference-architecture`**: A workflow skill for topology, sizing, deployment patterns, and use-case selection using the [JFrog Platform Reference Architecture](https://jfrog.com/reference-architecture/) (live `WebFetch`, primarily [llms-full.txt](https://jfrog.com/reference-architecture/llms-full.txt)). Requires `jfrog` for vocabulary only; no CLI needed for planning. - **`jfrog-setup-package-managers`**: A workflow skill that binds local package managers (npm, pip, maven, go, docker, …) to Artifactory via `jf setup` and records the workspace binding in `.jfrog/local/package-resolution.json`. Requires `jfrog`.

Install them in your AI coding agent and interact with JFrog through natural language. The `jfrog` skill must always be installed — workflow skills build on top of it.

## Requirements

- [`jf` CLI](https://jfrog.com/getcli/) **≥ 2.100.0** (required for `jf api`), `curl`, and `jq` on PATH - A configured JFrog instance (`jf config add`)

## Installation

From remote repository:

```bash npx skills add git@github.com:jfrog/jfrog-skills.git -g \ --skill jfr

Platform compatibility

shellFULL

Technical details

Version
1.0.0
License
Apache-2.0
Last updated
Jul 22, 2026
Published
Jul 22, 2026

Frameworks & tools

Shell

Decision snapshot

Fallback candidate

67
Ready
Prototype
Stage

recent repository activity

Audit

Install review

Install and adoption review

78
Needs review
Security
79/100
Maintenance
100/100
Install
92/100
Open full auditView eval report

Agent-proven evidence

Agent-proven evidence

Outcome reports after resolve, review, install, and one narrow run.

0
Proven
Needs first agent runAuto-install: review firstLast: Unknown
Success rate
—
Recent failure
—
Outcomes
0
Output quality
—
Failed
0
Not relevant
0
Installs
0
Risk blocked
0
Setup needed
0
Production
0

No agent outcome data yet. The first agent run can report success, setup needs, risk blocks, failure, or not-relevant through /api/agent/outcome.

Agent-Proven rankingOutcome contract

Install

Add to agent workflow

Free and open source. Review the report before installing into production agents.

Compare AlternativesAuto-resolve PlanView on GitHubDocumentation

Growth loop

Share kit

X

Scenario-led draft for Jfrog Skills, ready for a manual X post.

Curator note
A practical pick for source-backed research:

Jfrog Skills: A collection of reusable AI agent skills for interacting with the JFrog Platform, enabling natural language queries for art...

18 stars

https://www.openagentskill.com/skills/jfrog-jfrog-skills?ref=x
Open X draft
Optional reply with install command
Listing + install path for Jfrog Skills:
https://www.openagentskill.com/skills/jfrog-jfrog-skills?ref=x

Install: npx skills add jfrog/jfrog-skills
Open reply draft

Listing source

Community indexed

Claimable

This listing was indexed from public sources and is not marked official until a maintainer claim is approved.

Creator
jfrog
Indexed by
OpenAgentSkill community index

Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals.

Claim this skill

Owner claim

Claim this skill listing

This Community indexed listing is attributed to jfrog but is not marked official yet. Claim it to add a verified owner signal and make future launch, install, and audit updates easier to trust.

Creator backlink kit

Add the evidence badges to your README

Show the canonical listing, current trust and audit signals, and real Agent-Proven evidence where developers evaluate the repository.

[![Listed on OpenAgentSkill](https://www.openagentskill.com/api/badge/jfrog-jfrog-skills?metric=listed&label=Listed)](https://www.openagentskill.com/skills/jfrog-jfrog-skills)
[![OpenAgentSkill Trust](https://www.openagentskill.com/api/badge/jfrog-jfrog-skills?metric=trust&label=Trust)](https://www.openagentskill.com/skills/jfrog-jfrog-skills)
[![OpenAgentSkill Audit](https://www.openagentskill.com/api/badge/jfrog-jfrog-skills?metric=audit&label=Audit)](https://www.openagentskill.com/skills/jfrog-jfrog-skills/audit)
[![Agent Proven](https://www.openagentskill.com/api/badge/jfrog-jfrog-skills?metric=proven&label=Agent%20Proven)](https://www.openagentskill.com/skills/jfrog-jfrog-skills)
Preview badge Open audit Creator kit

Author

J

jfrog

@jfrog

Tags

jfrogcveartifactsdevopscompliance

Platform fit

Claude Code

Health signals

GitHub stars
18
Quality score
41/100
Last GitHub push
Jul 21, 2026
Framework hints
1
OpenAgentSkill views
1
Install copies
0
Outbound clicks
0

Community signal

Share whether this skill looks useful for your agent workflow. Aggregated feedback improves rankings over time.

Trust & safety

Sandbox only

64
  • GitHub adoption18 GitHub starsFIX
  • Stars/forks activity18 stars, 6 forks; issue activity unavailable in current metadataFIX
  • Recent maintenance11d since pushPASS
  • License clarityApache-2.0PASS
  • README/SKILL.md completenessMetadata includes enough usage and workflow contextPASS
  • Dependency/runtime riskcommand execution surface, external package install surfaceCHECK

Related skills

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

32.9K Stars · 0 Installs

Nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

29.2K Stars · 0 Installs

Infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

27.4K Stars · 0 Installs

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

16.3K Stars · 0 Installs