JFrog Plugin for Devin

JFrog plugin for Devin: JFrog Platform skills for artifact management, security scanning, and supply-chain workflows.

Current version: 0.1.1 — includes the official JFrog skills bundle from jfrog/jfrog-skills (pinned at v0.16.0).

Skills

Skill	Description
jfrog	JFrog Platform operations via CLI and APIs (Artifactory, Xray, access, projects, and more).
jfrog-package-safety-and-download	Check package safety and download via Artifactory.
jfrog-ai-catalog-skills	Discover, install, manage, and publish agent skills from the JFrog AI Catalog via jf skills and Agent Guard.

After install, Devin exposes them as /jfrog:jfrog, /jfrog:jfrog-package-safety-and-download, and /jfrog:jfrog-ai-catalog-skills.

Skill content is vendored under skills/ — see VENDOR.md.

Prerequisites

• Devin CLI — see Devin docs
• Devin CLI plugins enabled for your organization (devin plugins install must be allowed)
• Skill runtime (when using the skills) — jf CLI, jq, and curl on PATH, plus JFROG_URL and JFROG_ACCESS_TOKEN (or jf config add). See jfrog-skills requirements.

Installation

devin plugins install jfrog/devin-plugin -y

Verify

devin plugins list
devin plugins info jfrog

devin plugins info jfrog should list the skills above.

Repository layout

devin-plugin/
├── .devin-plugin/plugin.json
├── skills/
│   ├── jfrog/
│   ├── jfrog-package-safety-and-download/
│   └── jfrog-ai-catalog-skills/
├── .github/scripts/          # sync-skills vendoring
├── LICENSE
├── README.md
└── VENDOR.md

Validate locally

node scripts/validate-devin-plugin.mjs

Versioning

Bump version in .devin-plugin/plugin.json when you publish a new release, then tag (for example v0.1.1).

License

Apache License 2.0 — see LICENSE.