Security audit
Security checks across malware telemetry and agentic risk
This skill does what it claims: it lets an agent administer Proxmox hosts, but users should treat its credentials and infrastructure actions as sensitive.
Install only if you want an agent to manage your Proxmox environment. Use a dedicated Proxmox user with the minimum required permissions, keep the credentials file locked down, avoid root or broad tokens, enable TLS verification where practical, and require explicit confirmation before power actions, snapshot deletion, or rollback. Treat outputs such as hostnames, VM names, backups, task history, and token IDs as sensitive infrastructure information.
def action_vm(p: ProxmoxAPI, node: str, kind: str, vmid: str, action: str):
endpoint = getattr(p.nodes(node), kind)
return getattr(endpoint(vmid).status, action).post()
def snapshot_vm(p: ProxmoxAPI, node: str, kind: str, vmid: str, snapname: str, vmstate: bool = False):
endpoint = getattr(p.nodes(node), kind)## First-Time Setup ### Step 1: Create API Token on Proxmox For **each** Proxmox host you want to manage:
65/65 vendors flagged this skill as clean.
No suspicious patterns detected.