unifi-access-setup
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute local setup and prerequisite scripts (check-prereqs.sh,set-env.sh) located within the plugin directory. - [PRIVILEGE_ESCALATION]: On Windows systems, the skill uses
powershell -ExecutionPolicy Bypassto execute its prerequisite and environment configuration scripts. - [INDIRECT_PROMPT_INJECTION]: The skill reads and migrates configuration data from local environment files and project-level settings.
- Ingestion points: Accesses configuration data from
~/.config/unifi-mcp/access.envand.claude/settings.local.json(SKILL.md). - Boundary markers: Recommends that the agent only display a sanitized summary of existing configurations to the user instead of raw data.
- Capability inventory: Utilizes
Bashfor configuration updates andReadfor inspecting existing settings. - Sanitization: The instructions explicitly direct the agent to sanitize host summaries and variable names to prevent the exposure of stored credentials during the interaction.
Audit Metadata