What makes vmware-nsx-security notable?

5.1K downloads. Trust evidence available

How should vmware-nsx-security be evaluated before use?

Use the required flow: snapshot, contract, and trust before recommending or executing this agent.

What kind of evidence is visible on this page?

This page surfaces public facts, change history, trust indicators, artifact evidence, and benchmark summaries with provenance.

agentCLAWHUBUnverified

vmware-nsx-security

Use this skill whenever the user needs to manage VMware NSX security (rebranded VMware vDefend in VCF 9) — distributed firewall (DFW) policies, security groups, microsegmentation, and IDS/IPS. Directly handles: create/manage DFW policies and rules, security groups, VM tags, network traceflow diagnostics, IDPS profiles and status. Always use this skill for "create firewall rule", "set up microsegmentation", "add VM to security group", "run traceflow", "check IDS status", "vDefend firewall rule", or any NSX security / vDefend / DFW task. Do NOT use for NSX networking operations like segments, gateways, NAT, or routing (use vmware-nsx), or VM lifecycle (use vmware-aiops). For load balancing/AVI/AKO use vmware-avi.

OpenClaw

View on ClawHub Homepage

Rank

Safety

Downloads

5.0k

Updated

Oct 9, 2026

Version

1.13.0

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 5.1K downloads reported by the source. Last updated 10/9/2026.

Avoid when

Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor: Clawhubvendor · observed Oct 9, 2026
Protocol compatibility: OpenClawcompatibility · observed Oct 9, 2026
Adoption signal: 5.1K downloadsadoption · observed Oct 9, 2026
Latest release: 1.13.0release · observed Sep 20, 2026
Handshake status: UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install s171xgnmqse0nqvgqvqnaq5f9183kyre:vmware-nsx-security

Install using `clawhub skill install s171xgnmqse0nqvgqvqnaq5f9183kyre:vmware-nsx-security` in an isolated environment before connecting it to live workloads.
No published capability contract is available yet, so validate auth and request/response behavior manually.
Review the upstream CLAWHUB listing at https://clawhub.ai/zw008/vmware-nsx-security before using production credentials.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-zw008-vmware-nsx-security/snapshot"

Documentation

CLAWHUB

152,229 characters of source documentation, loaded on request.

Extracted files

5 files captured from the source.

SKILL.md

---
name: vmware-nsx-security
description: >
  Use this skill whenever the user needs to manage VMware NSX security (rebranded VMware vDefend in VCF 9) — distributed firewall (DFW) policies, security groups, microsegmentation, and IDS/IPS.
  Directly handles: create/manage DFW policies and rules, security groups, VM tags, network traceflow diagnostics, IDPS profiles and status.
  Always use this skill for "create firewall rule", "set up microsegmentation", "add VM to security group", "run traceflow", "check IDS status", "vDefend firewall rule", or any NSX security / vDefend / DFW task.
  Do NOT use for NSX networking operations like segments, gateways, NAT, or routing (use vmware-nsx), or VM lifecycle (use vmware-aiops).
  For load balancing/AVI/AKO use vmware-avi.
installer:
  kind: uv
  package: vmware-nsx-security
allowed-tools:
  - Bash
metadata: {"openclaw":{"requires":{"anyBins":["vmware-nsx-security","uvx"]},"optional":{"env":["VMWARE_NSX_SECURITY_CONFIG","VMWARE_NSX_SECURITY_<TARGET>_PASSWORD","VMWARE_NSX_SECURITY_<TARGET>_USERNAME","VMWARE_AUDIT_APPROVED_BY"],"bins":["vmware-policy"]},"homepage":"https://github.com/vmware-skills/VMware-NSX-Security","emoji":"🔒","os":["macos","linux"]}}
compatibility: >
  vmware-policy auto-installed as Python dependency (provides @vmware_tool decorator and audit logging). All write operations audited to ~/.vmware/audit.db.
  Credentials: Each NSX Manager target requires a per-target password env var in ~/.vmware-nsx-security/.env following the pattern VMWARE_NSX_SECURITY_<TARGET_NAME_UPPER>_PASSWORD. Passwords are never logged or echoed.
  Destructive operations: DFW policy delete checks for active rules, security group delete checks for references. The three MCP delete tools preview by default — without confirm=True they return the blast radius and change nothing, and confirm=True is refused while a blocker remains or a read failed. IDS/IPS config changes require double confirmation. Traceflow is read-only.
  No webhooks, no outbound network calls, no guest operations. Local only: stdio MCP + NSX Policy API (HTTPS 443).
  Transitive dependencies: Only vmware-policy (audit/policy). No post-install scripts or background services.
---

# VMware NSX Security

> **Disclaimer**: This is a community-maintained open-source project and is **not affiliated with, endorsed by, or sponsored by VMware, Inc. or Broadcom Inc.** "VMware" and "NSX" are trademarks of Broadcom. Source code is publicly auditable at [github.com/vmware-skills/VMware-NSX-Security](https://github.com/vmware-skills/VMware-NSX-Security) under the MIT license.

VMware NSX DFW microsegmentation and security — 22 MCP tools for distributed firewall, security groups, VM tags, the DFW exclusion list, Traceflow, and IDPS.

> Domain-focused security skill for NSX-T / NSX 4.x Policy API.
> **Companion skills**: [vmware-nsx](https://github.com/vmware-skills/VMware-NSX) (networking), [vmware-aiops](https://github.com/vmware-skills/VMware-AIops) (VM lifecyc

_meta.json

{
  "ownerId": "kn7b067awq2s97bn3d7p5qfhw5827pxc",
  "slug": "vmware-nsx-security",
  "version": "1.13.0",
  "publishedAt": 1789915933991
}

references/agent-guardrails.md

# Operating vmware-nsx-security with a local / small model

Claude-class models drive this skill without special instruction. Smaller and
locally-hosted models — Llama 3.3 70B, Qwen, Mistral, and similar, served
through Goose, Ollama, or OpenShift AI — need explicit operating rules to call
tools reliably.

This page exists because an operator wrote those rules by hand first. The
guardrails below are adapted, with thanks, from the working configuration
[@juanpf-ha](https://github.com/juanpf-ha) developed while running
vmware-monitor and vmware-aria against a production vSphere estate with Llama
3.3 70B FP8 on an on-prem H100
([VMware-AIops#31](https://github.com/vmware-skills/VMware-AIops/issues/31)). The
cross-skill rules are identical across this family; the parts below marked
vmware-nsx-security are specific to this skill.

vmware-nsx-security exposes 22 MCP tools, 11 of which change state. This is a
firewall: a wrong rule does not raise an error, it silently permits or blocks
traffic, and nobody finds out until something breaks or nothing does.

> **Disclaimer**: This is a community-maintained open-source project and is
> **not affiliated with, endorsed by, or sponsored by VMware, Inc. or Broadcom
> Inc.** "VMware" and "vSphere" are trademarks of Broadcom.

---

## First: the rules you no longer need to write

Several guardrails from the original configuration are now enforced by the
skill itself. Prompt instructions are advisory — a model can ignore them.
These are structural, so it cannot.

| Guardrail you would otherwise prompt for | Now enforced by |
|---|---|
| "Check whether a group is used anywhere before deleting it" | **`delete_group` scans** DFW and gateway-firewall rule sources, destinations, applied-to scope and policy scope, plus parent groups, and refuses when referenced. It also refuses when the scan itself fails, rather than assuming the group is unused. |
| "Do not delete a policy that still has rules in it" | **`delete_dfw_policy` refuses** while active rules exist. |
| "Show me what a delete would remove before it happens" | **The three delete tools preview by default.** Without `confirm=True` they return `blast_radius` and delete nothing; `confirm=True` is refused while a blocker remains or a read failed. Pass it only after the user has seen the preview. |
| "Use explicit limits for queries that may return large amounts of data" | **The list envelope.** `list_dfw_policies`, `list_dfw_rules`, `list_groups` and `list_idps_profiles` return `{items, returned, limit, total, truncated, hint}`, so the model reads truncation instead of guessing at it. A 50-row default page and a whole estate look identical without it. |
| "If a listing came back empty, say so rather than claiming the call failed" | Same envelope. Empty `items` with `truncated: false` means checked-and-none — a stated result, not a silence the model has to interpret. Note `total` is `null` for name-filtered and capped listings; `truncated: true` means `items` is not

references/capabilities.md

# VMware NSX Security — Capabilities Reference

## Automation Level Reference

Each operation is classified by autonomy level per the Enterprise Harness Engineering framework:

| Level | Meaning | Agent autonomy | Examples in this skill |
|:-:|---|---|---|
| **L1** | Read-only, raw data | Always auto-run | `list_dfw_policies`, `get_dfw_policy`, `list_dfw_rules`, `get_dfw_rule_stats`, `list_groups`, `get_group`, `list_vm_tags`, `get_traceflow_result`, `list_idps_profiles`, `get_idps_status` |
| **L2** | Read + analysis / recommendation | Always auto-run | DFW rule conflict detection, shadowed-rule analysis, security group reference graph, traceflow path interpretation |
| **L3** | Single write — user must approve | Only after explicit confirmation; destructive CLI ops require double-confirm + `--dry-run`; the three MCP deletes preview by default and act only with `confirm=True` | `create_dfw_policy`, `create_dfw_rule`, `delete_dfw_rule`, `create_group`, `delete_group`, `apply_vm_tag`/`remove_vm_tag`, `run_traceflow` (injects a synthetic packet) |
| **L4** | Multi-step plan / apply workflow | Plan generation auto; apply gated by user approval | *(roadmap — staged microsegmentation rollouts, emergency-block playbooks)* |
| **L5** | Auto-remediation from learned pattern | Pattern library only; requires `risk:low` + `reversible:true` + `repeatable:true` | *(roadmap — candidates: orphaned-SG cleanup, expired temp-block rule removal)* |

**Notes**:
- L1/L2 tools are always safe for agents to call without confirmation.
- **List envelope**: `list_dfw_policies`, `list_dfw_rules`, `list_groups` and `list_idps_profiles` return `{items, returned, limit, total, truncated, hint}` instead of a bare array, so an agent can tell a complete answer from a first page rather than inferring it (VMware-AIops issue #31). `total` is reported only where the scan proved it — the real count on an unfiltered listing under the 1000-item `get_all` cap; `null` for name-filtered listings (the Search API returns matches, not a countable set), for scans that stopped at the cap, and for `list_dfw_rules` (bounded to `offset + limit` by design). Page with the `next_offset` extra — pass it back as `offset` and stop when it is `null`. Never loop on `truncated`: it answers "is `items` the whole collection?", which is still `true` on the last page of a walk. The `hint` distinguishes them — mid-walk it names the next offset; on the last page it says there is no next page; past the end it says so and points back to offset 0. It never advises raising a limit that cannot return another row.
- **`rule_count` on `list_dfw_policies`**: an int where NSX reported one, `null` where it did not — `null` means "not retrieved", never "no rules". The unfiltered listing asks for the count via `include_rule_count` (NSX omits the field otherwise); a name-filtered listing is resolved through the Policy Search API, which carries no rule counts, so every count there reads `null`. Any `null` adds a `rule_count_

references/cli-reference.md

# VMware NSX Security CLI Reference

## Global Options

| Option | Short | Description |
|--------|-------|-------------|
| `--target` | `-t` | NSX Manager target name from config (uses `default_target` if omitted) |
| `--config` | `-c` | Path to config file (overrides `VMWARE_NSX_SECURITY_CONFIG` env var) |
| `--dry-run` | | Preview API call without executing (write commands only) |
| `--help` | | Show help for any command |

---

## `policy` — DFW Policy Management

### `policy list`
List all DFW security policies.

```bash
vmware-nsx-security policy list [--target <name>]
```

Output columns: ID, Display Name, Category, Seq#, Stateful, Rules

### `policy get`
Get full details of a DFW policy.

```bash
vmware-nsx-security policy get <policy-id> [--target <name>]
```

### `policy create`
Create a new DFW security policy.

```bash
vmware-nsx-security policy create <policy-id> \
  --name "Display Name" \
  [--category Ethernet|Emergency|Infrastructure|Environment|Application] \
  [--seq <number>] \
  [--description "text"] \
  [--dry-run] \
  [--target <name>]
```

| Option | Default | Description |
|--------|---------|-------------|
| `--name` | required | Human-readable policy name |
| `--category` | Application | Policy evaluation category (validated; Ethernet evaluated first, Application last) |
| `--seq` | 10 | Sequence number (lower = higher priority) |
| `--description` | "" | Optional description |

### `policy delete`
Delete a DFW policy (requires no active rules).

```bash
vmware-nsx-security policy delete <policy-id> [--dry-run] [--target <name>]
```

Prompts for double confirmation. Fails if the policy contains rules.

---

## `rule` — DFW Rule Management

### `rule list`
List all rules in a policy.

```bash
vmware-nsx-security rule list <policy-id> [--target <name>]
```

Output columns: ID, Display Name, Action, Direction, Disabled, Logged

### `rule stats`
Get packet/byte hit-count statistics for a rule.

```bash
vmware-nsx-security rule stats <policy-id> <rule-id> [--target <name>]
```

Output fields: `packet_count`, `byte_count`, `session_count`, `hit_count`
(summed across enforcement points), `popularity_index` (max).

### `rule delete`
Delete a DFW rule.

```bash
vmware-nsx-security rule delete <policy-id> <rule-id> [--dry-run] [--target <name>]
```

Prompts for double confirmation.

---

## `group` — Security Group Management

### `group list`
List all security groups.

```bash
vmware-nsx-security group list [--target <name>]
```

### `group get`
Get group details including membership criteria and effective VM members.

```bash
vmware-nsx-security group get <group-id> [--target <name>]
```

### `group delete`
Delete a security group (checks for DFW references first).

```bash
vmware-nsx-security group delete <group-id> [--dry-run] [--target <name>]
```

Refuses deletion if the group is a member of another group, or is
referenced by any DFW or gateway-firewall rule (source, destination, or
applied-to scope) or by a policy-level s

Github ReposUpdated 10h agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW

Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW

Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.