Rh virt security review#86

Merged

dmartinol merged 37 commits into

RHEcosystemAppEng:mainfrom

r2dedios:rh-virt-security-review

May 8, 2026

Commits on May 7, 2026

fix(rh-virt): RH-VIRT-001 Fixing yaml injection in vm-snapshot-create
r2dedios
committed
fix(rh-virt): RH-VIRT-005 remove CLI fallback from vm-inventory to prevent command injection
r2dedios
committed
fix(rh-virt): RH-VIRT-015 require per-VM typed confirmation for batch deletion
r2dedios
committed
fix(rh-virt): RH-VIRT-003 restrict resources_create_or_update to VirtualMachineSnapshot only
r2dedios
committed
fix(rh-virt): RH-VIRT-006 remove external doc reads to prevent indirect prompt injection
r2dedios
committed
fix(rh-virt): RH-VIRT-007 clarify human-in-the-loop as not required for read-only skill
r2dedios
committed
fix(rh-virt): RH-VIRT-020 remove shell commands, use MCP tools exclusively
r2dedios
committed
fix(rh-virt): RH-VIRT-026 enforce per-VM confirmation, fix already-running example
r2dedios
committed
fix(rh-virt): RH-VIRT-032 require typed snapshot name confirmation for deletion
r2dedios
committed
fix(rh-virt): RH-VIRT-034 add allowed-tools to vm-snapshot-delete
r2dedios
committed
fix(rh-virt): RH-VIRT-008 skip VMI detail queries when listing more than 20 VMs
r2dedios
committed
fix(rh-virt): RH-VIRT-012 replace ambiguous relative paths and remove Read tool injection
r2dedios
committed
fix(rh-virt): RH-VIRT-013 add allowed-tools to vm-rebalance frontmatter
r2dedios
committed
fix(rh-virt): RH-VIRT-017 add allowed-tools to vm-delete frontmatter
r2dedios
committed
fix(rh-virt): RH-VIRT-021 add custom image provenance warning
r2dedios
committed
fix(rh-virt): RH-VIRT-022 bound provisioning polling to max 3 retries
r2dedios
committed
fix(rh-virt): RH-VIRT-030 add allowed-tools to vm-snapshot-list frontmatter
r2dedios
committed
fix(rh-virt): RH-VIRT-023 add allowed-tools to vm-create frontmatter
r2dedios
committed
fix(rh-virt): RH-VIRT-027 add allowed-tools to vm-lifecycle-manager frontmatter
r2dedios
committed
fix(rh-virt): RH-VIRT-035 remove unsupported batch deletion trigger phrases
r2dedios
committed
fix(rh-virt): RH-VIRT-038 limit batch cloning to 5 with per-VM confirmation
r2dedios
committed
fix(rh-virt): RH-VIRT-040 add allowed-tools to vm-snapshot-restore frontmatter
r2dedios
committed
fix(rh-virt): RH-VIRT-041 narrow activation phrases to explicit snapshot restore
r2dedios
committed
chore: make allowed-tools a required field in skill linter
r2dedios
committed
fix(rh-virt): RH-VIRT-043 add missing vm_lifecycle to vm-rebalance allowed-tools
r2dedios
committed
fix(rh-virt): RH-VIRT-044 add quota check before cloning to prevent resource exhaustion
r2dedios
committed
fix(rh-virt): RH-VIRT-045 add missing vm_lifecycle to vm-snapshot-restore allowed-tools
r2dedios
committed
fix(rh-virt): RH-VIRT-046 add missing vm_lifecycle to vm-lifecycle-manager allowed-tools
r2dedios
committed
fix(rh-virt): RH-VIRT-047 add missing vm_create and vm_lifecycle to vm-create allowed-tools
r2dedios
committed
fix(rh-virt): RH-VIRT-048 remove Read tool injection and fix relative paths in vm-create
r2dedios
committed
fix(rh-virt): RH-VIRT-050 restore Document Consultation pattern in vm-rebalance
r2dedios
committed
fix(rh-virt): RH-VIRT-051 align VMI query threshold to 20 in vm-inventory
r2dedios
committed
feat(workflows): add iteration history and thumbs up/down reactions
r2dedios
committed
fix(rh-virt): RH-VIRT-052 add missing vm_lifecycle to vm-delete allowed-tools
r2dedios
committed
chore(rh-virt): Returned back to ecosystem-eng Openshift MCP server version
r2dedios
committed
revert(rh-virt): temporarily remove allowed-tools from all skills
r2dedios
committed

Commits on May 8, 2026

revert(rh-virt): restore relative paths in skill documentation links
r2dedios
committed