jfrog-package-safety-and-download
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the JFrog CLI (
jf) to perform GraphQL queries, REST API calls, and binary downloads. It also uses standard shell utilities likejqandgrepfor data processing and error handling. Inputs are wrapped in quotes to mitigate basic command injection risks. - [DATA_EXPOSURE]: The skill creates temporary files in the
/tmpdirectory to store request payloads and response logs. These files contain package-related metadata and are managed using process IDs to prevent naming collisions.
Audit Metadata