proxmox-mcp-tools

This is a declarative tool catalog for legitimate Proxmox VM administration, not executable malware. It exposes powerful administrative capabilities, especially arbitrary guest-agent command execution, arbitrary VM configuration updates, destructive disk/VM operations, and network changes. Those capabilities present substantial operational and authorization risk if the surrounding tool server lacks strict access control, validation, and confirmation, but the supplied fragment itself contains no evidence of malicious behavior or data theft.

This is declarative documentation for legitimate but highly privileged Proxmox administration operations. It contains no observable malicious payload or supply-chain attack behavior. The primary security concern is the operational impact of the documented elevated capabilities, especially arbitrary guest command execution, guest file writes, password changes, firewall modification, and migration. The implementation should enforce strict authorization, audit logging, input validation, and target scoping; those controls cannot be verified here.