pp-unifi

SUSPICIOUS. The core UniFi auditing purpose aligns with the requested API access and local state handling, and the install sources appear to be same-project rather than arbitrary third-party payloads. However, the skill has medium risk due to publisher mismatch, unpinned external CLI installation, autonomous background state mutations, and an optional arbitrary-webhook output path that could exfiltrate network audit data if used.