← Back to Skills Marketplace
420
Downloads
0
Stars
0
Active Installs
23
Versions
Install in OpenClaw
/install vmware-aria
Description
Use this skill whenever the user needs VMware Aria Operations data — performance metrics, alerts, capacity planning, anomaly detection, and automated reports...
Usage Guidance
This skill appears internally consistent for accessing VMware Aria Operations. Before installing: (1) verify the GitHub/pypi source (the repo is community-maintained, not an official VMware distribution), (2) review the package code or run in an isolated environment if you don't trust the publisher, (3) follow the docs: keep ~/.vmware-aria/.env permissioned to 600 and use least-privilege Aria accounts (ReadOnly for reads, PowerUser only where acknowledge/cancel/report writes are needed), (4) be aware the CLI will connect to your Aria Ops endpoints over HTTPS (port 443) and will create an audit DB at ~/.vmware/audit.db, and (5) confirm the package name on PyPI/uv matches the GitHub project to avoid typosquatting. If you want higher assurance, ask for the actual package source (PyPI project page or GitHub tag) to review the code before installing.
Capability Analysis
Type: OpenClaw Skill
Name: vmware-aria
Version: 1.5.15
The vmware-aria skill bundle is a legitimate toolset for managing VMware Aria Operations, providing 27 tools for metrics, alerts, and capacity planning. It demonstrates strong security practices, including mandatory audit logging via the vmware-policy dependency, input sanitization, SSL verification, and secure credential handling using environment variables in a restricted .env file. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; all capabilities are well-documented and aligned with the stated purpose of infrastructure monitoring.
Capability Tags
Capability Assessment
Purpose & Capability
Name/description match the declared requirements: the skill needs the `vmware-aria` CLI, a VMWARE_ARIA_CONFIG pointing to config, and per-target password env vars. Required config paths (~/.vmware-aria/config.yaml and ~/.vmware-aria/.env) are directly relevant to connecting to Aria Operations.
Instruction Scope
SKILL.md instructs the agent to run the `vmware-aria` CLI and to read the declared config and .env password variables — this is within scope. One minor note: the docs state write-audit goes to ~/.vmware/audit.db (via vmware-policy); that path is not listed in the manifest's required config paths. The skill also recommends adding MCP entries to local dotfiles (e.g., ~/.claude.json) which is expected for local MCP integrations.
Install Mechanism
There is no opaque remote binary download in the registry entry; SKILL.md documents common install routes (uv tool, pip, from-source via GitHub). These are standard for community CLI tools. The homepage points to a GitHub user repo (community-maintained), so users should validate the source before pip installing, but the install mechanisms themselves are proportional to the task.
Credentials
Requested environment variables and files are limited and directly related to authenticating to Aria Operations: VMWARE_ARIA_CONFIG (config path) and per-target VMWARE_ARIA_<TARGET>_PASSWORD variables. No unrelated secrets or cloud provider credentials are requested.
Persistence & Privilege
The skill is not always-enabled and does not request system-wide privileges. It will create/read files under the user's home (config, .env, and an audit DB), and suggests optional MCP entries in user dotfiles — these are expected for a local CLI/MCP integration. Nothing indicates modification of other skills or global agent configuration beyond user-editable dotfiles.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install vmware-aria - After installation, invoke the skill by name or use
/vmware-aria - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.5.15
v1.5.15: single-command MCP entry point (vmware-aria mcp), verify_ssl default true. Legacy entry point kept for backward compat.
v1.5.14
v1.5.14: code review fixes by @yjs-2026 + Snyk E005 disclaimer
v1.5.12
Security & bug fixes from @yjs-2026 code review
v1.5.11
Align with VMware skill family v1.5.11
v1.5.10
Security: python-multipart 0.0.22→0.0.26 (DoS fix)
v1.5.8
MCP confirmed gate for alert ops + scoped SSL warnings
v1.5.7
Align with VMware skill family v1.5.7
v1.5.6
Align with VMware skill family v1.5.6
v1.5.5
Align with VMware skill family v1.5.5
v1.5.4
Security: pytest 9.0.2→9.0.3 (CVE-2025-71176); Align family v1.5.4
v1.5.3
No changes detected in this release.
- Version bumped to 1.5.3, but no file or functionality changes are present.
- Existing features and compatibility remain unchanged.
v1.5.2
- Added open-source project disclaimer and clarified no affiliation with VMware or Broadcom.
- Improved documentation of credential management: per-target passwords now clearly defined with VMWARE_<TARGET>_PASSWORD environment variables.
- Expanded compatibility notes with increased detail on read-only tool coverage and security (no outbound calls, credentials not logged).
- Minor wording and formatting improvements for clarity throughout the documentation.
v1.5.0
v1.5.0: Anthropic best practices, [READ]/[WRITE] prefixes, Broadcom attestation
v1.4.10
fix create_alert_definition doc, [READ]/[WRITE] prefixes, Broadcom author attestation
v1.4.9
Security routing fixes and vmware-policy clarity; NSX auth fix for special char passwords
v1.4.8
Security patch: bump cryptography 46.0.6→46.0.7 (CVE-2026-39892), urllib3→2.6.3, requests→2.33.0
v1.4.7
Fix: align openclaw metadata; add .env config and vmware-policy optional dep; standardize audit path to ~/.vmware/audit.db
v1.4.6
fix: remove suspicious content for clean scan
v1.4.5
Security: pygments ReDoS CVE fix; Infrastructure: uv.lock for all repos
v1.4.4
v1.4.4: vmware-avi family integration, cross-skill routing, sanitize coverage, safety tests
Metadata
Frequently Asked Questions
What is Vmware Aria?
Use this skill whenever the user needs VMware Aria Operations data — performance metrics, alerts, capacity planning, anomaly detection, and automated reports... It is an AI Agent Skill for Claude Code / OpenClaw, with 420 downloads so far.
How do I install Vmware Aria?
Run "/install vmware-aria" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Vmware Aria free?
Yes, Vmware Aria is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Vmware Aria support?
Vmware Aria is cross-platform and runs anywhere OpenClaw / Claude Code is available (macos, linux).
Who created Vmware Aria?
It is built and maintained by zw008 (@zw008); the current version is v1.5.15.
More Skills