Vmware Policy

Unified audit logging, policy enforcement, and input sanitization for the entire VMware MCP skill family. Use when querying audit logs, managing policy rules...

This skill appears to be what it claims: a local audit and policy library that decorates other VMware skills. Before installing: 1) verify the upstream source (github.com/zw008/VMware-Policy) and inspect the published package if you can; 2) ensure ~/.vmware is restricted (chmod 700) and review ~/.vmware/rules.yaml so rules do not inadvertently permit or block operations you care about; 3) confirm that sensitive parameters are declared via sensitive_params to avoid logging secrets, and audit the DB (~/.vmware/audit.db) contents for sensitive data; 4) note the skill detects agent-related env vars (for logging) and honors VMWARE_POLICY_DISABLED for bypass — treat that env var carefully; 5) resolve the minor metadata inconsistency about the install spec (SKILL.md has an installer block but registry says no install spec) by checking the package manifest before install. Overall coherent, but review logging/configuration and the package source before enabling across many skills.

Type: OpenClaw Skill Name: vmware-policy Version: 1.5.14 The vmware-policy skill serves as a defensive infrastructure layer providing audit logging, policy enforcement, and input sanitization for VMware-related tools. It includes a @vmware_tool decorator for tracking execution, a PolicyEngine for rule-based access control, and a sanitize() function designed to prevent prompt injection from API responses. While it inspects environment variables like OPENAI_API_KEY to identify the calling agent, the documentation explicitly states this is for metadata purposes only and that no credentials are logged or exfiltrated. The behavior is well-documented and aligns with its stated purpose as a security utility.