claude

jfrog

Official JFrog plugin. Connect Claude Code to JFrog to manage, secure, and govern your software supply chain. Give agents the context to build secure, compliant software.

6 on GitHubby JFrog Ltd.v0.3.21Apache-2.0updated 4 days ago

Not in a marketplace yet, so it loads for one session with --plugin-dir.

Plugin jfrog in jfrog/claude-plugin. Commands read from the repo's manifest — 3 days ago.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (7)

  • jfrog-ai-catalog

    Discover, search, install, update, remove, and publish agent skills and plugins hosted in the JFrog AI Catalog (Artifactory) via the JFrog CLI (`jf skills`, `jf agent plugins`) and JFrog Agent Guard. Use whenever the user asks what skills or plugins are available or installed, wants to browse/search

  • jfrog-init

    Set up and verify the JFrog plugin. Run on first install, to complete initial configuration, or to diagnose a broken setup.

  • jfrog-mcp-management

    Use to install, list, or remove MCP servers, and to discover which MCPs the user can install — including questions about available, approved, or allowed MCPs for a project. That governed catalog is the authoritative answer; do not answer those questions from local IDE/settings allowlists alone. Use

  • jfrog-package-curation

    Check/download a package (npm, Maven, PyPI, Go...) via JFrog — safe, allowed, curated? Or: package op fails/blocked (ETARGET, 403, blocked by curation policy, missing version, waiver) — root cause it. Checks the JFrog Public Catalog and stored packages for a version, interprets catalog security sign

  • jfrog-reference-architecture

    Guides JFrog Platform topology, sizing (RPM, t-shirt templates), deployment, multi-site use cases, SaaS vs self-managed, HA, air-gapped, and disaster recovery using the official Reference Architecture site as the sole source of facts. Use this skill when the user asks how to size Artifactory or Xray

  • jfrog-setup-package-managers

    Use this skill when the user asks to set up, configure, bind, or connect a package manager (npm, pip, uv, pipenv, maven, gradle, go, docker, helm, ...) to JFrog Artifactory via `jf setup` and `.jfrog/local/package-resolution.json`; when a workspace manifest exists with no matching binding entry; or

  • jfrog

    Interact with the JFrog Platform via the JFrog CLI, JFrog MCP server and REST/GraphQL APIs. Use this skill when the user wants to manage Artifactory repositories, upload or download artifacts, manage builds, configure permissions, manage users and groups, work with access tokens, configure JFrog CLI

MCP servers (1)

  • jfrog

    connects to: ${JFROG_URL}/mcp

Hooks (8)

  • SessionStart

    node "${CLAUDE_PLUGIN_ROOT}/modules/claude-session-start.mjs" package-resolution

  • SessionStart

    node "${CLAUDE_PLUGIN_ROOT}/scripts/claude-register-align-watch-paths.mjs"

  • SessionStart

    node "${CLAUDE_PLUGIN_ROOT}/scripts/claude-align-mcp-json.mjs" session-start

  • SessionStart

    npx --yes --registry "${JFROG_AGENT_GUARD_REPO:-https://releases.jfrog.io/artifactory/api/npm/coding-agents-npm/}" @jfrog/agent-guard --version >/dev/null 2>&1 || true

  • SessionStart

    node "${CLAUDE_PLUGIN_ROOT}/modules/core/local-shadow-trigger.mjs" session_start

  • FileChanged

    node "${CLAUDE_PLUGIN_ROOT}/scripts/claude-align-mcp-json.mjs" file-changed

  • PreToolUse

    npm_config_fetch_retries=0 npm_config_fetch_timeout=10000 JF_AGENT_GUARD_ENFORCE_DEADLINE="$(($(date +%s) + 25))" npx --yes --prefer-offline --registry "${JFROG_AGENT_GUARD_REPO:-https://releases.jfro

  • UserPromptExpansion

    npm_config_fetch_retries=0 npm_config_fetch_timeout=10000 JF_AGENT_GUARD_ENFORCE_DEADLINE="$(($(date +%s) + 25))" npx --yes --prefer-offline --registry "${JFROG_AGENT_GUARD_REPO:-https://releases.jfro

View source on GitHub jfrog.com

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain jfrog?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex pluginslisted