Trust Assessment
proxmox received a trust score of 72/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 3 findings: 0 critical, 1 high, 2 medium, and 0 low severity. Key findings include Unpinned Python dependency version, Insecure SSL/TLS configuration (verify_ssl=False).
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings3
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Insecure SSL/TLS configuration (verify_ssl=False) The `ProxmoxAPI` client is initialized with `verify_ssl=False`. This disables SSL/TLS certificate verification, making the connection vulnerable to Man-in-the-Middle (MITM) attacks. An attacker could intercept, read, or modify sensitive data (such as Proxmox API tokens and responses) without detection, leading to data exfiltration or credential harvesting. Remove `verify_ssl=False` or set it to `True`. Ensure that the system or application trusts the certificate authority (CA) that signed the Proxmox VE server's SSL certificate. If using self-signed certificates, import the CA certificate into the system's trust store. | LLM | scripts/proxmox.py:36 | |
| MEDIUM | Unpinned Python dependency version Requirement 'proxmoxer>=2.0.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/robnew/proxmox-skill/requirements.txt:1 | |
| MEDIUM | Unpinned Python dependency version Requirement 'requests>=2.0.0' is not pinned to an exact version. Pin Python dependencies with '==<exact version>'. | Dependencies | skills/robnew/proxmox-skill/requirements.txt:2 |
Scan History
Embed Code
[](https://skillshield.io/report/afda1fddd50e5af1)
Powered by SkillShield