JFrog Artifactory
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the official
jfCLI andcurlfor repository and artifact management. This is the intended and documented functionality for an Artifactory integration. - [EXTERNAL_DOWNLOADS]: Mentions the automatic installation of the
jfCLI, which is the official command-line interface provided by the skill's author, JFrog. References to external registries like Docker Hub and npmjs.org are standard for repository configuration. - [CREDENTIALS_UNSAFE]: Appropriately handles authentication by referencing environment variables (
$JFROG_ACCESS_TOKEN,$JFROG_URL) in examples, avoiding the use of hardcoded secrets. - [DATA_EXFILTRATION]: No suspicious network operations or data movement patterns were detected; all documented network calls are directed to the user's configured JFrog instance or well-known public registries.
Audit Metadata