jfrog-setup-package-managers
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the jf setup command to configure package manager resolution settings and runs local scripts for workspace configuration management.
- [DATA_EXFILTRATION]: The skill accesses local JFrog-specific configuration files to manage repository bindings; it explicitly instructs the agent not to store or handle credentials in these workspace files.
- [SAFE]: The skill implements security best practices including input validation for repository keys and a robust locking mechanism in its shell scripts to prevent race conditions during configuration updates.
Audit Metadata