diff --git a/marketplace.json b/marketplace.json
index 9707368..3aa11cc 100644
--- a/marketplace.json
+++ b/marketplace.json
@@ -9,7 +9,7 @@
     {
       "name": "jfrog",
       "description": "JFrog Platform integration with MCP, security skills, and supply-chain best practices",
-      "version": "1.0.5",
+      "version": "1.0.6",
       "source": "plugin",
       "categories": [
         "security",
diff --git a/plugin/.claude-plugin/plugin.json b/plugin/.claude-plugin/plugin.json
index 6c0de44..d8bf545 100644
--- a/plugin/.claude-plugin/plugin.json
+++ b/plugin/.claude-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "jfrog",
   "description": "JFrog Platform integration with MCP, security skills, and supply-chain best practices",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "author": { "name": "JFrog", "url": "https://jfrog.com" },
   "hooks": "hooks/hooks.json"
 }
diff --git a/plugin/skills/jfrog/SKILL.md b/plugin/skills/jfrog/SKILL.md
index f7bc0ba..973ccf4 100644
--- a/plugin/skills/jfrog/SKILL.md
+++ b/plugin/skills/jfrog/SKILL.md
@@ -13,11 +13,12 @@ description: >-
   Also use when the user mentions jf, jfrog, artifactory, xray, distribution,
   evidence, apptrust, onemodel, graphql, workers, mission control, curation,
   advanced security, exposures, or any JFrog product name.
+  Do NOT use this skill to install, add, remove, list, or manage MCP servers.
 compatibility: >-
   Requires jq on PATH.
 metadata:
   role: base
-  version: "0.15.0"
+  version: "0.16.0"
 ---
 
 # JFrog Skill
@@ -30,6 +31,12 @@ Interact with the JFrog Platform through three tool tiers — see
 by the agent. If the agent does not resolve it, determine the path by locating
 this SKILL.md file and using its parent directory.
 
+> **Out of scope: MCP server management.** Installing, listing, removing, or
+> configuring MCP servers (e.g. "install an MCP", "what MCPs can I install",
+> "list my MCPs", "which MCP servers can I use", "what's in my approved MCP
+> catalog") is handled by the JFrog Agent Guard workflow
+> (`@jfrog/agent-guard`) — a separate workflow, not this skill.
+
 ## Tool selection strategy
 
 Try the tiers in order; move to the next only when the current does not