Please report security issues responsibly so we can address them before public disclosure.

• Email: security@jfrog.com or follow the process described on JFrog’s security page.

Include steps to reproduce, affected versions or commits, and impact if known.

This repository ships a Devin CLI plugin (skills; MCP and Agent Guard configuration in later releases).

Do not commit secrets, API keys, or credentials. Skill runtime data under **/local-cache/ must not be checked into git.