VCF Green IT & Carbon Footprint

An MCP server that interfaces with VMware Aria Operations to extract Green IT metrics, carbon footprint data, and the organizational Green Score for ESG repo...

This skill is coherent with its stated purpose, but review these practical risks before enabling it: - Protect the API token: avoid placing ARIA_OPS_API_TOKEN as plaintext in shared config or logs; use a secure secret store or scoped service account with least privilege. - TLS verification: the code disables SSL verification (verify=False) and suppresses warnings—this weakens transport security and could allow MITM. If your Aria Ops has a valid certificate, modify the code to enable verification; if using self-signed certs, add the CA instead of disabling verification. - Data exposure: the tool returns whatever the Aria endpoint provides. Ensure you are comfortable with the agent receiving those metrics and any underlying resource identifiers. - Run in a controlled environment: host the MCP server on a trusted machine/network and restrict outbound access to the ARIA_OPS_HOST only. - Audit and rotate credentials: monitor usage of the API token and rotate/revoke if needed. Review the mcp and requests dependencies for supply-chain concerns. If you need the skill to be stricter about TLS or token handling, ask the maintainer to (1) remove verify=False or accept a CA file, and (2) support reading the token from a secure vault instead of env var plaintext.

Type: OpenClaw Skill Name: vcf-sustainability-mcp Version: 1.0.1 The skill bundle is a legitimate MCP server designed to interface with VMware Aria Operations for sustainability reporting. The code in server.py correctly implements the get_vcf_carbon_footprint tool using the provided environment variables for authentication. While the script disables SSL verification (verify=False), it is explicitly documented as a workaround for self-signed certificates common in internal enterprise environments. There are no signs of data exfiltration, malicious execution, or prompt injection.