📦 VCF Log Explorer (MCP) — 日志洞察搜索
v1.0.1一个 MCP 服务器，提供原生工具，在 VMware Aria Operations for Logs（Log Insight）中即时搜索、过滤与聚合日志，帮助运维人员快速定位故障与异常。
0· 90·0 当前·0 累计
by 下载技能包
最后更新
2026/4/6
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says, but review and harden before deploying: 1) The code disables TLS verification (requests.get(..., verify=False)) — acceptable for internal servers with self-signed certs but exposes you to MITM if used incorrectly; prefer supplying a CA bundle or enabling verification. 2) Verify the 'mcp' PyPI package source and pinned versions before pip install. 3) Treat LOGINSIGHT_API_TOKEN as highly sensitive; run the MCP server in an isolated environment or container an...详细分析 ▾
✓ 用途与能力
The name/description (VCF Log Insight MCP Explorer) matches the provided files and runtime behavior. Required env vars (LOGINSIGHT_HOST, LOGINSIGHT_API_TOKEN) directly relate to calling the Log Insight API. Declared dependencies (mcp, requests) are appropriate for running an MCP server and making HTTP requests.
ℹ 指令范围
SKILL.md instructs the agent to run the provided Python MCP server and set the two Log Insight env vars — this is expected. The instructions do not ask the agent to read unrelated files or credentials. The code formats and returns log events to the caller only. One small scope caveat: the MCP server will hold the API token in its process environment while running, so any actor with access to that process can potentially read it.
ℹ 安装机制
No special install mechanic is used beyond 'pip install -r requirements.txt'. This is a moderate-risk install vector (PyPI packages). The requirements are minimal and expected, but you should verify the 'mcp' package's provenance and versions before installation.
ℹ 凭证需求
Only LOGINSIGHT_HOST and LOGINSIGHT_API_TOKEN are required, which is proportionate to the stated functionality. The skill will use the API token to query logs; treat this token as sensitive. The code does not request unrelated secrets or system credentials.
✓ 持久化与权限
The skill is not marked 'always: true'. It runs as an MCP server process when configured and can be invoked autonomously by the agent (platform default). This is expected for an MCP-based tool; there are no attempts to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/4/6
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install vcf-loginsight-mcp
镜像加速npx clawhub@latest install vcf-loginsight-mcp --registry https://cn.longxiaskill.com