Security audit
VMware Monitor
Security checks for vulnerabilities and agentic risk
Overview
This VMware monitoring skill is purpose-aligned and disclosed as read-only, with sensitive infrastructure data access that should be scoped carefully.
Before installing, use a dedicated vCenter/ESXi read-only service account, grant extra privileges such as session listing or host log access only if needed, treat webhook destinations as receiving operational data, and remember that b64 password storage is obfuscation rather than encryption.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.