← Back to Skills Marketplace
VCF LCM Pre-check Analyzer
by
Rohit Kasture
· GitHub ↗
· v1.0.1
· MIT-0
89
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install vcf-lcm-precheck-analyzer
Description
An MCP server that interfaces with VCF SDDC Manager to retrieve and analyze LCM upgrade pre-check results, providing instant remediation steps for failures.
Usage Guidance
This skill appears coherent and limited to querying your SDDC Manager, but take these precautions before installing: (1) Run the MCP server on a trusted host with network access to your SDDC Manager. (2) Provide a token with least privilege necessary (avoid using a full administrator token) and rotate it regularly. (3) Be aware the code disables SSL verification for self-signed certs — if possible, use valid TLS or restrict network exposure to prevent MITM. (4) Review the short server.py yourself (it is included) to confirm it matches your security policies. (5) If you allow autonomous agent invocation, treat the skill like any other connector with access to your SDDC API and monitor its usage.
Capability Analysis
Type: OpenClaw Skill
Name: vcf-lcm-precheck-analyzer
Version: 1.0.1
The skill provides a tool to analyze VMware Cloud Foundation (VCF) upgrade pre-checks via the SDDC Manager API. It is classified as suspicious because server.py explicitly disables SSL certificate verification (verify=False) when making API calls. This is a security vulnerability that could expose the sensitive SDDCMANAGER_API_TOKEN to man-in-the-middle (MITM) attacks. No evidence of intentional malice or data exfiltration was found.
Capability Assessment
Purpose & Capability
The skill declares and uses SDDCMANAGER_HOST and SDDCMANAGER_API_TOKEN, calls the SDDC Manager /v1/upgrades/prechecks endpoint, and exposes a single MCP tool analyze_lcm_precheck — all align with the stated purpose.
Instruction Scope
SKILL.md instructs running a local MCP server and only that server reads the two declared env vars. The code disables TLS verification (verify=False and suppresses insecure warnings) to allow self-signed certs; this is plausible for VCF environments but increases MITM risk and should be acknowledged/mitigated.
Install Mechanism
Install is pip install -r requirements.txt for 'mcp' and 'requests' from PyPI — a standard, expected approach. There are no downloads from untrusted URLs or extracted archives.
Credentials
Only two env vars are required and both are directly relevant to connecting to SDDC Manager. No unrelated credentials, config paths, or unexpected secrets are requested.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It runs as a local MCP server and can be invoked by the agent (normal for MCP skills); it does not modify other skills or agent-wide config.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install vcf-lcm-precheck-analyzer - After installation, invoke the skill by name or use
/vcf-lcm-precheck-analyzer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added a homepage URL to the skill metadata.
- Updated version number to 1.0.1.
v1.0.0
- Initial release of vcf-lcm-precheck-analyzer.
- Provides a native `analyze_lcm_precheck` tool for integration with OpenClaw via MCP.
- Connects to VMware Cloud Foundation SDDC Manager to retrieve and analyze LCM upgrade pre-check results.
- Outputs instant remediation steps for detected failures.
- Requires `SDDCMANAGER_HOST` and `SDDCMANAGER_API_TOKEN` environment variables for setup.
Metadata
Frequently Asked Questions
What is VCF LCM Pre-check Analyzer?
An MCP server that interfaces with VCF SDDC Manager to retrieve and analyze LCM upgrade pre-check results, providing instant remediation steps for failures. It is an AI Agent Skill for Claude Code / OpenClaw, with 89 downloads so far.
How do I install VCF LCM Pre-check Analyzer?
Run "/install vcf-lcm-precheck-analyzer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is VCF LCM Pre-check Analyzer free?
Yes, VCF LCM Pre-check Analyzer is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does VCF LCM Pre-check Analyzer support?
VCF LCM Pre-check Analyzer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created VCF LCM Pre-check Analyzer?
It is built and maintained by Rohit Kasture (@kasture-rohit); the current version is v1.0.1.
More Skills