JFrog Artifactory

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the official jf CLI and curl for repository and artifact management. This is the intended and documented functionality for an Artifactory integration.
  • [EXTERNAL_DOWNLOADS]: Mentions the automatic installation of the jf CLI, which is the official command-line interface provided by the skill's author, JFrog. References to external registries like Docker Hub and npmjs.org are standard for repository configuration.
  • [CREDENTIALS_UNSAFE]: Appropriately handles authentication by referencing environment variables ($JFROG_ACCESS_TOKEN, $JFROG_URL) in examples, avoiding the use of hardcoded secrets.
  • [DATA_EXFILTRATION]: No suspicious network operations or data movement patterns were detected; all documented network calls are directed to the user's configured JFrog instance or well-known public registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 03:44 PM