proxmox-infrastructure

BENIGN overall purpose and data flow: the skill’s SSH/API access matches Proxmox cluster management, with no third-party credential routing or hidden execution. Primary concern is weakened transport security because the Proxmox API client disables TLS verification; otherwise the capabilities are proportionate and internally consistent.

The code is a legitimate read-only Proxmox template validation utility. No evidence of malicious behavior or supply-chain attack code is present. The main security issue is disabling TLS certificate verification, which can expose Proxmox credentials or tokens to man-in-the-middle attacks. SSL verification should be enabled and configured with a trusted CA certificate.