proxmox-infrastructure
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The provided Python scripts (
check_ceph_health.py,check_cluster_health.py) use thesshcommand to gather diagnostics from remote Proxmox nodes. These scripts implement robust validation for node hostnames and IP addresses to prevent command injection, and execute only hardcoded diagnostic commands (e.g.,ceph status,pvecm status). - [EXTERNAL_DOWNLOADS]: The skill references downloads for official Ubuntu cloud images and Proxmox CEPH packages from trusted domains such as
cloud-images.ubuntu.comand official Proxmox repositories. These are well-known services and essential for the skill's primary purpose. - [CREDENTIALS_UNSAFE]: No hardcoded secrets were detected. The documentation and code samples correctly emphasize the use of environment variables and API tokens for authentication, following security best practices.
- [COMMAND_EXECUTION]: Static analysis flagged destructive commands such as
wipefsandlvremovewithin the CEPH and storage management documentation. In context, these are documented administrative operations necessary for disk preparation and volume management, and are correctly labeled as destructive for the user.
Audit Metadata