jfrog

Use the JFrog Platform from Claude Code: Artifactory repos and artifacts, security findings and exposures, Catalog package safety and downloads, workflows across the SDLC, and platform administration.

Install

If the official marketplace isn’t added yet, run

Category: Security
Author: JFrog Ltd.
GitHub: jfrog/claude-plugin
Website: jfrog.com

Good for

Work with Artifactory repositories, builds, permissions and release bundles
Run security audits and CVE lookups
Check whether npm, Maven, PyPI or Go packages are safe or allowed, and download them through Artifactory
Install and manage approved MCP servers through the Agent Guard

Getting started

Have your JFrog platform URL and access token, and configure the JFrog CLI with jf config add
Run /plugin install jfrog@claude-plugins-official in Claude Code
Run /jfrog-init to set the host; the MCP server connects with OAuth
Ask Claude about repositories, package safety or security findings

Before you install

Requires Claude Code 1.0+, Node.js 18+ with npx, the jf CLI, jq and curl; Git Bash on Windows. The Agent Guard needs the AI Catalog entitlement on your subscription.

Summarized by AI from the project docs; check the official docs before relying on it.

Similar tools

claude-securityOfficial plugin · Security
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.
security-guidanceOfficial plugin · Security
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
42crunch-api-security-testingOfficial plugin · Security
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.
auth0Official plugin · Security
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
crowdsecOfficial plugin · Security
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.