40Medium
The skill lacks version pinning for dependencies, references missing external documentation files, and fails to meet metadata specifications, creating risks of supply chain compromise and unpredictable runtime behavior.
Skill Info
Namezw008/VMware-Monitor/vmware-monitor
Registrygithub
Version7f98f345f72f
PURLpkg:github/zw008/VMware-Monitor@7f98f345f72f?skill=vmware-monitor
Stars9
Source
SHA-2560535df6e9a9f...
SHA-1f45f376f1f4f...
MD5829a7451ce47...
TLSH33a2b993b310...
ssdeep384:Uw5VDCAd...
Size22,415 bytes
Install
This skill has findings worth reviewing before installing.
GitHub
Skills.shDocs
npx skills add https://github.com/zw008/VMware-MonitorAssessments (3)
AI Agent Traps ↗Organization name detectedmediumpii exposureAML.T0024LLM02:2025
NER model detected organization in skill content (confidence: 0.85)
85% confidence
M**
Organization name detectedmediumpii exposureAML.T0024LLM02:2025
NER model detected organization in skill content (confidence: 0.55)
55% confidenceline 22
*
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/health-summary-template.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[`references/health-summary-template.md`](references/health-summary-template.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/investigation-protocol.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[`references/investigation-protocol.md`](references/investigation-protocol.md)
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Compatibility field exceeds maximum lengthinfopolicy violation
Skill 'compatibility' field exceeds the Agent Skills spec limit of 500 characters.
100% confidence
Unpinned dependency installationlowsupply chainAML.T0010AML.T0019AML.T0058LLM03:2025
The installation instructions use 'uv tool install vmware-monitor' without version pinning, which may lead to the execution of unverified or malicious code updates in the future.
90% confidenceline 51
uv tool install vmware-monitor
Version History (6)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/zw008/VMware-Monitor/vmware-monitor)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/zw008/VMware-Monitor/vmware-monitor"><img src="https://mondoo.com/ai-agent-security/api/badge/github/zw008/VMware-Monitor/vmware-monitor.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/zw008/VMware-Monitor/vmware-monitor.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow