← 返回 Skills 市场
420
总下载
0
收藏
0
当前安装
23
版本数
在 OpenClaw 中安装
/install vmware-aria
功能描述
Use this skill whenever the user needs VMware Aria Operations data — performance metrics, alerts, capacity planning, anomaly detection, and automated reports...
安全使用建议
This skill appears internally consistent for accessing VMware Aria Operations. Before installing: (1) verify the GitHub/pypi source (the repo is community-maintained, not an official VMware distribution), (2) review the package code or run in an isolated environment if you don't trust the publisher, (3) follow the docs: keep ~/.vmware-aria/.env permissioned to 600 and use least-privilege Aria accounts (ReadOnly for reads, PowerUser only where acknowledge/cancel/report writes are needed), (4) be aware the CLI will connect to your Aria Ops endpoints over HTTPS (port 443) and will create an audit DB at ~/.vmware/audit.db, and (5) confirm the package name on PyPI/uv matches the GitHub project to avoid typosquatting. If you want higher assurance, ask for the actual package source (PyPI project page or GitHub tag) to review the code before installing.
功能分析
Type: OpenClaw Skill
Name: vmware-aria
Version: 1.5.15
The vmware-aria skill bundle is a legitimate toolset for managing VMware Aria Operations, providing 27 tools for metrics, alerts, and capacity planning. It demonstrates strong security practices, including mandatory audit logging via the vmware-policy dependency, input sanitization, SSL verification, and secure credential handling using environment variables in a restricted .env file. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; all capabilities are well-documented and aligned with the stated purpose of infrastructure monitoring.
能力标签
能力评估
Purpose & Capability
Name/description match the declared requirements: the skill needs the `vmware-aria` CLI, a VMWARE_ARIA_CONFIG pointing to config, and per-target password env vars. Required config paths (~/.vmware-aria/config.yaml and ~/.vmware-aria/.env) are directly relevant to connecting to Aria Operations.
Instruction Scope
SKILL.md instructs the agent to run the `vmware-aria` CLI and to read the declared config and .env password variables — this is within scope. One minor note: the docs state write-audit goes to ~/.vmware/audit.db (via vmware-policy); that path is not listed in the manifest's required config paths. The skill also recommends adding MCP entries to local dotfiles (e.g., ~/.claude.json) which is expected for local MCP integrations.
Install Mechanism
There is no opaque remote binary download in the registry entry; SKILL.md documents common install routes (uv tool, pip, from-source via GitHub). These are standard for community CLI tools. The homepage points to a GitHub user repo (community-maintained), so users should validate the source before pip installing, but the install mechanisms themselves are proportional to the task.
Credentials
Requested environment variables and files are limited and directly related to authenticating to Aria Operations: VMWARE_ARIA_CONFIG (config path) and per-target VMWARE_ARIA_<TARGET>_PASSWORD variables. No unrelated secrets or cloud provider credentials are requested.
Persistence & Privilege
The skill is not always-enabled and does not request system-wide privileges. It will create/read files under the user's home (config, .env, and an audit DB), and suggests optional MCP entries in user dotfiles — these are expected for a local CLI/MCP integration. Nothing indicates modification of other skills or global agent configuration beyond user-editable dotfiles.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install vmware-aria - 安装完成后，直接呼叫该 Skill 的名称或使用
/vmware-aria触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.5.15
v1.5.15: single-command MCP entry point (vmware-aria mcp), verify_ssl default true. Legacy entry point kept for backward compat.
v1.5.14
v1.5.14: code review fixes by @yjs-2026 + Snyk E005 disclaimer
v1.5.12
Security & bug fixes from @yjs-2026 code review
v1.5.11
Align with VMware skill family v1.5.11
v1.5.10
Security: python-multipart 0.0.22→0.0.26 (DoS fix)
v1.5.8
MCP confirmed gate for alert ops + scoped SSL warnings
v1.5.7
Align with VMware skill family v1.5.7
v1.5.6
Align with VMware skill family v1.5.6
v1.5.5
Align with VMware skill family v1.5.5
v1.5.4
Security: pytest 9.0.2→9.0.3 (CVE-2025-71176); Align family v1.5.4
v1.5.3
No changes detected in this release.
- Version bumped to 1.5.3, but no file or functionality changes are present.
- Existing features and compatibility remain unchanged.
v1.5.2
- Added open-source project disclaimer and clarified no affiliation with VMware or Broadcom.
- Improved documentation of credential management: per-target passwords now clearly defined with VMWARE_<TARGET>_PASSWORD environment variables.
- Expanded compatibility notes with increased detail on read-only tool coverage and security (no outbound calls, credentials not logged).
- Minor wording and formatting improvements for clarity throughout the documentation.
v1.5.0
v1.5.0: Anthropic best practices, [READ]/[WRITE] prefixes, Broadcom attestation
v1.4.10
fix create_alert_definition doc, [READ]/[WRITE] prefixes, Broadcom author attestation
v1.4.9
Security routing fixes and vmware-policy clarity; NSX auth fix for special char passwords
v1.4.8
Security patch: bump cryptography 46.0.6→46.0.7 (CVE-2026-39892), urllib3→2.6.3, requests→2.33.0
v1.4.7
Fix: align openclaw metadata; add .env config and vmware-policy optional dep; standardize audit path to ~/.vmware/audit.db
v1.4.6
fix: remove suspicious content for clean scan
v1.4.5
Security: pygments ReDoS CVE fix; Infrastructure: uv.lock for all repos
v1.4.4
v1.4.4: vmware-avi family integration, cross-skill routing, sanitize coverage, safety tests
元数据
常见问题
Vmware Aria 是什么？
Use this skill whenever the user needs VMware Aria Operations data — performance metrics, alerts, capacity planning, anomaly detection, and automated reports... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 420 次。
如何安装 Vmware Aria？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install vmware-aria」即可一键安装，无需额外配置。
Vmware Aria 是免费的吗？
是的，Vmware Aria 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Vmware Aria 支持哪些平台？
Vmware Aria 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（macos, linux）。
谁开发了 Vmware Aria？
由 zw008（@zw008）开发并维护，当前版本 v1.5.15。
推荐 Skills