jfrog-create-repos
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes common CLI tools including
bash,curl,jq,jf(JFrog CLI),docker, andnpmto perform repository configuration and verification. These operations are aligned with the skill's stated purpose of automating Artifactory setup. - [EXTERNAL_DOWNLOADS]: The skill references several well-known and official package registry URLs (e.g.,
registry-1.docker.io,registry.npmjs.org,repo1.maven.org) specifically for the configuration of remote proxy repositories in Artifactory. These are standard infrastructure endpoints for the respective technologies. - [CREDENTIALS_UNSAFE]: Authentication is managed through environment variables (
JFROG_ACCESS_TOKEN). The documentation explicitly recommends security best practices, such as storing these in.envfiles and ensuring they are excluded from version control via.gitignore. Examples provided in the documentation use non-functional placeholder values. - [PROMPT_INJECTION]: The skill includes operational guardrails, such as mandatory project existence checks before repository creation, which prevents the accidental creation of orphaned or unmanaged resources. No bypass or override patterns were detected.
Audit Metadata