This Agent Skill controls VMware Workstation Pro running on the local machine through the ZacharyZcR/vmware-mcp MCP server.

Read skills/vmware-workstation/SKILL.md before installing. This skill instructs AI agents to execute commands on your local hypervisor. Understand what operations are allowed and which require confirmation.

• Never paste credentials in chat prompts. Pass user and password parameters only through MCP tool arguments.
• Never store VMware encryption passwords in this skill. The skill does not support encrypted VM passwords (-vp flag). Start encrypted VMs from the VMware Workstation GUI instead.
• vmrest credentials (if using REST API tools) should be set as environment variables, never hardcoded in configuration files committed to version control.

This skill enforces confirmation gates for destructive operations:

• Double confirmation: VM deletion, snapshot deletion, snapshot revert
• Single confirmation: hard stop, hard reset, guest command execution, file writes to guest, NIC/disk/network changes
• Snapshot suggestion: before any destructive operation, the agent is instructed to suggest creating a snapshot

These gates depend on the AI agent respecting the skill instructions. No technical enforcement exists — the skill is an instruction contract, not a permission system.

Report security issues via:

• GitHub Issues
• GitHub Security Advisories

Please include:

• Affected version
• Steps to reproduce
• Impact assessment