Security audit
Security checks across malware telemetry and agentic risk
This Proxmox administration skill appears purpose-built and mostly transparent, but it has enough overbroad infrastructure-control risk to warrant review before installation.
Install only with a Proxmox API token limited to the specific nodes, VMs, containers, and actions you intend the agent to manage. Review or patch the VM kind/action validation before allowing power operations, and prefer pinned dependency versions in controlled environments.
def status_current(p: ProxmoxAPI, node: str, kind: str, vmid: str):
# kind is usually 'qemu' or 'lxc'
endpoint = getattr(p.nodes(node), kind)
return endpoint(vmid).status.current.get()
def action_vm(p: ProxmoxAPI, node: str, kind: str, vmid: str, action: str):def action_vm(p: ProxmoxAPI, node: str, kind: str, vmid: str, action: str):
# action: start, stop, reboot, shutdown
endpoint = getattr(p.nodes(node), kind)
return getattr(endpoint(vmid).status, action).post()
def _vm_endpoint(p: ProxmoxAPI, node: str, kind: str, vmid: str):proxmoxer>=2.0.0 requests>=2.0.0
proxmoxer>=2.0.0 requests>=2.0.0
66/66 vendors flagged this skill as clean.
No suspicious patterns detected.