github Python re-analysis due

vmware-skills/VMware-Monitor

github

Read-only VMware vCenter/ESXi monitoring — code-level enforced safety, zero destructive operations

maintainer
vmware-skills
license
MIT
first seen
2026-08-01
last seen
2026-09-05
releases · 30d
11
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 32 tools
transport stdio · http verified reported listed in the official MCP registry counts 32 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • active_sessions
  • active_tasks
  • certificate_status
  • cluster_health_summary
  • cluster_last_apply_result
  • cluster_patch_compliance
  • cross_vcenter_attention
  • datastore_capacity
  • datastore_investigation_bundle
  • get_alarms
  • get_events
  • get_host_sensors
  • get_host_services
  • host_investigation_bundle
  • host_log_scan
  • host_memory_tiering
  • host_performance
  • license_status
  • list_all_clusters
  • list_all_datastores
  • list_all_networks
  • list_esxi_hosts
  • list_virtual_machines
  • ntp_status
  • resource_pool_usage
  • snapshot_aging
  • vcenter_deployment_size
  • vm_backup_snapshot_history
  • vm_info
  • vm_investigation_bundle
  • vm_list_snapshots
  • vm_performance
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 4dc57f7 · analyzer v33 · 5d ago

skills & prompt files 1

code evidence vv1.9.2 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 103

filesystem 22

  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/conftest.py :27 import shutil
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/eval/capability/_scoring.py :35 from pathlib import Path
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/eval/capability/test_error_actionability.py :61 import pathlib
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/eval/regression/test_error_resilience.py :21 from pathlib import Path
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/eval/regression/test_read_only_enforcement.py :63 from pathlib import Path
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/eval/regression/test_release_blockers.py :17 from pathlib import Path
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/eval/regression/test_text_io_declares_encoding.py :16 Known blind spot, stated rather than left implicit: ``Path.open()`` is not
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/eval/regression/test_vim_attribute_conformance.py :22 from pathlib import Path
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/eval/regression/test_vsphere91_endpoints.py :21 from pathlib import Path
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/test_cli_daemon_resilience.py :19 from pathlib import Path
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/test_config.py :4 from pathlib import Path
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/test_init_wizard.py :13 from pathlib import Path
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/test_no_destructive_ops.py :16 from pathlib import Path
  • fs (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/test_vsphere91_fixes.py :19 from pathlib import Path
  • fs vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/cli.py :14 from pathlib import Path
  • fs vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/cli_base.py :12 from pathlib import Path
  • fs vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/cli_observability.py :19 from pathlib import Path
  • fs vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/config.py :17 from pathlib import Path
  • fs vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/doctor.py :70 with open(path, encoding="utf-8") as f:
  • fs vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/notify/audit.py :11 from pathlib import Path
  • fs vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/notify/logger.py :8 from pathlib import Path
  • fs vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/scanner/scheduler.py :9 from pathlib import Path

network 5

  • net (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/eval/regression/test_a_91_only_404_is_not_a_bad_moid.py :11 import httpx
  • net (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/test_safe_error_passthrough.py :42 import socket
  • net vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/doctor.py :80 import socket
  • net vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/notify/webhook.py :9 import httpx
  • net vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/rest.py :23 import httpx

secrets 3

  • secrets (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/test_config.py :91 os.environ["VMWARE_TEST_VC_PASSWORD"] = "secret123"
  • secrets (weak) vmware-skills-VMware-Monitor-4dc57f7/tests/test_init_wizard.py :68 assert os.environ["VMWARE_PROD1_PASSWORD"] == "p@ss w/ space"
  • secrets vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/notify/audit.py :5 import getpass

tool registrations 32

  • list_virtual_machines vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :232
  • list_esxi_hosts vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :283
  • list_all_datastores vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :311
  • list_all_clusters vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :339
  • cluster_health_summary vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :367
  • vm_investigation_bundle vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :414
  • host_investigation_bundle vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :452
  • datastore_investigation_bundle vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :490
  • cross_vcenter_attention vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :528
  • list_all_networks vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :567
  • get_alarms vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :600
  • get_events vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :633
  • get_host_sensors vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :675
  • get_host_services vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :707
  • host_log_scan vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :740
  • vm_info vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :783
  • vm_list_snapshots vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :812
  • host_performance vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :847
  • vm_performance vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :883
  • snapshot_aging vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :924
  • vm_backup_snapshot_history vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :962
  • certificate_status vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :1023
  • license_status vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :1058
  • ntp_status vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :1087
  • datastore_capacity vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :1132
  • resource_pool_usage vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :1166
  • active_tasks vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :1205
  • active_sessions vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/server.py :1241
  • host_memory_tiering vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/tools_vsphere91.py :33
  • cluster_patch_compliance vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/tools_vsphere91.py :67
  • cluster_last_apply_result vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/tools_vsphere91.py :98
  • vcenter_deployment_size vmware-skills-VMware-Monitor-4dc57f7/vmware_monitor/mcp_server/tools_vsphere91.py :127

declared dependencies 9

  • mcp@>=1.10,<2.0
  • pyvmomi@>=8.0.3.0,<10.0
  • pyaml@>=24.0,<27.0
  • typer@>=0.12,<1.0
  • rich@>=13.0,<16.0
  • apscheduler@>=3.10,<4.0
  • httpx@>=0.27,<1.0
  • python-dotenv@>=1.0,<2.0
  • vmware-policy@>=1.13.0,<2.0