proxmox-infrastructure

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The provided Python scripts (check_ceph_health.py, check_cluster_health.py) use the ssh command to gather diagnostics from remote Proxmox nodes. These scripts implement robust validation for node hostnames and IP addresses to prevent command injection, and execute only hardcoded diagnostic commands (e.g., ceph status, pvecm status).
  • [EXTERNAL_DOWNLOADS]: The skill references downloads for official Ubuntu cloud images and Proxmox CEPH packages from trusted domains such as cloud-images.ubuntu.com and official Proxmox repositories. These are well-known services and essential for the skill's primary purpose.
  • [CREDENTIALS_UNSAFE]: No hardcoded secrets were detected. The documentation and code samples correctly emphasize the use of environment variables and API tokens for authentication, following security best practices.
  • [COMMAND_EXECUTION]: Static analysis flagged destructive commands such as wipefs and lvremove within the CEPH and storage management documentation. In context, these are documented administrative operations necessary for disk preparation and volume management, and are correctly labeled as destructive for the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 08:50 AM
Security Audit — agent-trust-hub — proxmox-infrastructure