pp-unifi
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the
unifi-pp-clitool usingnpxfrom@mvanhorn/printing-press-libraryandgo installfrom the vendor's GitHub repository. These are documented as standard installation procedures for the tool. - [COMMAND_EXECUTION]: The skill makes extensive use of the
unifi-pp-clibinary to perform network operations, such as viewing topologies, auditing ports, and managing firewall rules. - [DYNAMIC_EXECUTION]: The skill implements a 'learning loop' that instructs the agent to execute 'trial commands' from candidates and 'playbook steps' retrieved from a local SQLite database at runtime. This allows for dynamic command generation and execution based on previous tool outputs.
- [DATA_EXFILTRATION]: The CLI supports an output delivery mechanism via
--deliver webhook:<url>which allows POSTing command results to arbitrary external URLs. Additionally, thefeedbackcommand can transmit local data to a remote endpoint ifUNIFI_FEEDBACK_ENDPOINTis configured. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes untrusted data from network devices and a local learning store while maintaining the capability to execute shell commands.
- Ingestion points: Output from
unifi-pp-cli recalland various UniFi Network API responses (firewall rules, device names). - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are provided for data processing.
- Capability inventory: The skill has permission to use the
Bashtool to execute theunifi-pp-clibinary. - Sanitization: No explicit sanitization or validation of external content is mentioned for the execution paths.
Audit Metadata