Bolts go into the frame rails just behind where the sway bar is mounted.
Factory mount used threaded studs in the cross member and nuts to hold up the front of the skid. My XJ did not have the studs, but had the holes that lined up. I reamed the holes and used (3) nuts/bolts.