diff --git a/README.md b/README.md
index 4bbd823..57d6c28 100644
--- a/README.md
+++ b/README.md
@@ -13,7 +13,7 @@ The JFrog plugin provides the following capabilities, grouped by component:
 | --- | --- | --- |
 | **MCP** | JFrog Platform MCP server | Registers the remote JFrog Platform MCP (`https://${JFROG_PLATFORM_URL}/mcp`, OAuth) into OpenCode's `config.mcp.jfrog`. Authenticate once with `opencode mcp auth jfrog`. Opt out with `JFROG_MCP_DISABLE=true`. |
 | **Skill** | JFrog Platform | Interact with Artifactory repositories, builds, permissions, users, access tokens, projects, release bundles, and platform administration via the JFrog CLI and REST/GraphQL APIs. Also covers security audits, CVE lookups, and Advanced Security exposure queries. |
-| **Skill** | Package safety & download | Check whether npm, Maven, PyPI, Go, and other packages are safe, curated, or allowed, then download them through Artifactory remote caches or curation-aware package managers. |
+| **Skill** | Package curation | Check whether npm, Maven, PyPI, Go, and other packages are safe, curated, or allowed, then download them through Artifactory remote caches or curation-aware package managers. |
 | **Skill** | Agent Guard | OpenCode manages MCPs through the JFrog Agent Guard. Discover, install, configure, update, and remove MCP servers from the JFrog AI Catalog approved for your project, and authenticate to remote HTTP MCPs via OAuth, API key, or bearer token. |
 
 The skills ship **with the plugin** (vendored and pinned) — they are **not** downloaded
@@ -162,7 +162,7 @@ grouped by capability.
 | "Create a scoped access token for CI." | Creates an access token with the requested scope. |
 | "Promote this release bundle to production." | Uses Lifecycle / Distribution APIs to promote the bundle. |
 
-### Package safety & download skill
+### Package curation skill
 
 | Ask the agent… | What happens |
 | --- | --- |
diff --git a/VENDOR.md b/VENDOR.md
index 1a2af46..9e88dd0 100644
--- a/VENDOR.md
+++ b/VENDOR.md
@@ -39,7 +39,7 @@ The result is a flat, committed tree:
 ```
 skills/
   jfrog/SKILL.md (+ references/ scripts/ assets/)
-  jfrog-package-safety-and-download/SKILL.md
+  jfrog-package-curation/SKILL.md
   jfrog-setup-package-managers/SKILL.md
   jfrog-ai-catalog-skills/SKILL.md
   jfrog-mcp-management/SKILL.md