vmware-harden SKILL.md skillA

vmware-harden from vmware-skills/vmware-harden is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add vmware-skills/vmware-harden/vmware-harden@git:20261101.18b15f7

Pins git:20261101.18b15f7 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
vmware-skills/vmware-harden
Path
skills/vmware-harden/SKILL.md
Versions recorded
20
Latest version
git:20261101.18b15f7, committed Nov 1, 2026
First version recorded
Aug 12, 2026
Size
20,964 bytes
Repository stars
4
License
MIT

Use this skill whenever the user needs to perform VMware cyber compliance auditing (aligned with VCF 9 Advanced Cyber Compliance / ACC), baseline checking, or drift detection on vSphere/ESXi/NSX environments. Directly handles: CIS / vSphere SCG / 等保 2.0 三级 / PCI-DSS / BSI IT-Grundschutz / EU NIS2 scans; known-vulnerability (VMSA) matching of ESXi/vCenter builds; custom YAML baselines; LLM-driven remediation suggestions; web dashboard. Always use this skill for "scan compliance…

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# VMware Harden (Compliance & Baseline)

> Self-test: [guide](https://github.com/vmware-skills/marketplace/blob/main/MODEL_FIT_SELF_TEST.md).

> **Disclaimer**: This is a community-maintained open-source project and is **not affiliated with, endorsed by, or sponsored by VMware, Inc. or Broadcom Inc.** "VMware" and "vSphere" are trademarks of Broadcom. Source code is publicly auditable at [github.com/vmware-skills/VMware-Harden](https://github.com/vmware-skills/VMware-Harden) under the MIT license.

AI-native VMware compliance scanner — built-in CIS / vSphere SCG / 等保 2.0 三级 / PCI-DSS / BSI IT-Grundschutz / EU NIS2 baselines, a VMSA known-vulnerability check, drift detection, LLM-driven remediation advice, and a web dashboard.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add vmware-skills/vmware-harden/vmware-harden@sha256:5160c12e26429b64

The line at the top of this page pins the label git:20261101.18b15f7, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_r55m4rj6k2mmdund.svg)](https://markdownregistry.com/a/art_r55m4rj6k2mmdund)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 20 versions of this file, between Aug 12, 2026 and Nov 1, 2026, about one every 4 days.

versioncommittedcommitsizeaudit
git:20261101.18b15f7 latest2026-11-01 18b15f7 20,964 BA view · diff
git:20261031.0426a042026-10-31 0426a04 20,862 BA view · diff
git:20261019.478c2a42026-10-19 478c2a4 20,862 BA view · diff
git:20261019.7df902f2026-10-19 7df902f 20,027 BA view · diff
git:20261019.8d771102026-10-19 8d77110 18,559 BA view · diff
git:20261016.13dbd702026-10-16 13dbd70 18,559 BA view · diff
git:20261015.4813a382026-10-15 4813a38 18,559 BA view · diff
git:20261015.181e1142026-10-15 181e114 18,559 BA view · diff
git:20261014.e0e59e22026-10-14 e0e59e2 18,559 BA view · diff
git:20261013.9aef9d72026-10-13 9aef9d7 18,559 BA view · diff
git:20260920.8adbf062026-09-20 8adbf06 18,286 BA view · diff
git:20260916.4a2112b2026-09-16 4a2112b 18,289 BA view · diff
git:20260915.41d42992026-09-15 41d4299 18,286 BA view · diff
git:20260914.f9059e32026-09-14 f9059e3 18,286 BA view · diff
git:20260914.03445c92026-09-14 03445c9 18,286 BA view · diff
git:20260912.ec684fd2026-09-12 ec684fd 18,129 BA view · diff
git:20260830.9adf8892026-08-30 9adf889 18,178 BA view · diff
git:20260813.24a058a2026-08-13 24a058a 17,740 BA view · diff
git:20260812.14c13e62026-08-12 14c13e6 16,864 BA view · diff
git:20260812.42835152026-08-12 4283515 16,630 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (20964 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

vmware-skills/vmware-harden · 4 stars · license MIT · pushed 2026-11-01 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_r55m4rj6k2mmdund
GET https://markdownregistry.com/api/v1/resolve?ref=vmware-skills/vmware-harden/vmware-harden
GET https://markdownregistry.com/api/v1/blob/5160c12e26429b64a944931c03f0a8da29ba156593152cdcc13a146c0e5d13a9

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

Browse by kind, by grade A, or by owner.