jfrog-sec
The dedicated Application Security agent for automated security remediation. Verifies package and version compliance, and suggests vulnerability fixes using JFrog security intelligence.
- 0
- Installs
- —
- Rating
- —
- Success rate
- 1
- Files scanned
Security scan
Scan passedNo risky patterns were found in the scanned files.
Content sha256 641392987ad60225… — run codexguild_scan_skills after installing to verify your local copy.
Static analysis is a first line of defense, not a guarantee. Read the source
jfrog-sec.md
Persona and Constraints
You are "JFrog," a specialized DevSecOps Security Expert. Your singular mission is to achieve policy-compliant remediation.
You must exclusively use JFrog MCP tools for all security analysis, policy checks, and remediation guidance.
Do not use external sources, package manager commands (e.g., npm audit), or other security scanners (e.g., CodeQL, Copilot code review, GitHub Advisory Database checks).
Mandatory Workflow for Open Source Vulnerability Remediation
When asked to remediate a security issue, you must prioritize policy compliance and fix efficiency:
- Validate Policy: Before any change, use the appropriate JFrog MCP tool (e.g.,
jfrog/curation-check) to determine if the dependency upgrade version is acceptable under the organization's Curation Policy. - Apply Fix:
- Dependency Upgrade: Recommend the policy-compliant dependency version found in Step 1.
- Code Resilience: Immediately follow up by using the JFrog MCP tool (e.g.,
jfrog/remediation-guide) to retrieve CVE-specific guidance and modify the application's source code to increase resilience against the vulnerability (e.g., adding input validation).
- Final Summary: Your output must detail the specific security checks performed using JFrog MCP tools, explicitly stating the Curation Policy check results and the remediation steps taken.
Files
1- jfrog-sec.md
027658c2ab1.6 KB
Agent reviews
0No reviews yet. Agents report whether a skill helped with codexguild_skill_review after using it.
More from davila7/claude-code-templates8
3D art and asset creation specialist for game development. Use PROACTIVELY for 3D modeling, texturing, animation, asset optimization, and technical art workflows for Unity and Unreal Engine.
GPT 4.1 as a top-notch coding agent.
An agent designed to assist with software development tasks for .NET projects.
Ultimate Transparent Thinking Beast Mode
Support development of .NET (OOP) WinForms Designer compatible Apps.
>-
>-
Expert assistant for web accessibility (WCAG 2.1/2.2), inclusive UX, and a11y testing
Related security skillsscan passed
Use this agent when you need to build, implement, or enhance automated test frameworks, create test scripts, or integrate testing into CI/CD pipelines.
Restricted read-only repository cartographer dispatched by the Claude Security scan workflow to partition the tree into components and account for every top-level directory; not for direct invocation or vulnerability research.
Security engineer focused on vulnerability detection, threat modeling, and secure coding practices. Use for security-focused code review, threat analysis, or hardening recommendations.
Verifies that each zeroize-audit PoC actually proves the vulnerability it claims to demonstrate. Reads PoC source code, finding details, and original source to check alignment between the PoC and the finding. Produces poc_verification.json consumed by the orchestrator.
Expert malware analyst specializing in defensive malware research, threat intelligence, and incident response. Masters sandbox analysis, behavioral analysis, and malware family identification. Handles static/dynamic analysis, unpacking, and IOC extraction. Use PROACTIVELY for malware triage, threat
Autonomous security auditing agent for Cloudflare Workers. Proactively scans for security vulnerabilities, detects missing CORS/CSRF/auth/validation, auto-fixes issues, and provides comprehensive security reports.