VCF LCM Pre-check Analyzer

An MCP server that interfaces with VCF SDDC Manager to retrieve and analyze LCM upgrade pre-check results, providing instant remediation steps for failures.

This skill appears coherent and limited to querying your SDDC Manager, but take these precautions before installing: (1) Run the MCP server on a trusted host with network access to your SDDC Manager. (2) Provide a token with least privilege necessary (avoid using a full administrator token) and rotate it regularly. (3) Be aware the code disables SSL verification for self-signed certs — if possible, use valid TLS or restrict network exposure to prevent MITM. (4) Review the short server.py yourself (it is included) to confirm it matches your security policies. (5) If you allow autonomous agent invocation, treat the skill like any other connector with access to your SDDC API and monitor its usage.

Type: OpenClaw Skill Name: vcf-lcm-precheck-analyzer Version: 1.0.1 The skill provides a tool to analyze VMware Cloud Foundation (VCF) upgrade pre-checks via the SDDC Manager API. It is classified as suspicious because server.py explicitly disables SSL certificate verification (verify=False) when making API calls. This is a security vulnerability that could expose the sensitive SDDCMANAGER_API_TOKEN to man-in-the-middle (MITM) attacks. No evidence of intentional malice or data exfiltration was found.