unifi-protect-setup
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local setup scripts (
check-prereqs.sh,set-env.sh, and PowerShell equivalents) located within the plugin's directory structure to verify the environment and save configuration. - [PRIVILEGE_ESCALATION]: On Windows systems, the skill uses
-ExecutionPolicy Bypassto execute prerequisite scripts. This is a common pattern for automated setup tools to ensure functionality across different system configurations. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests untrusted user input (hostnames, usernames, and file paths) and interpolates them into shell command arguments.
- Ingestion points: User-provided host/IP, username, and absolute paths for credential providers.
- Boundary markers: Absent; the skill instructions do not specify delimiters or sanitization for user-provided strings before they are used in
bashorpowershellcommands. - Capability inventory: The skill utilizes
BashandReadtools to execute scripts and inspect existing configuration files. - Sanitization: No explicit sanitization or validation of the user input format is defined in the instructions.
Audit Metadata