CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

30.8 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 1 flagged

Securityscore 88 · 1 finding

MEDIUMInstruction telling the agent not to ask for approvalSS-SKILL-INJECT-DONT-ASK-01 · Prompt injection · HARBOR_SETUP.md

MEDIUM — it fires on intent; the real damage depends on the host agent's own approval-gating.

Why it matters

The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.

The exact value spotted

excerptHARBOR_SETUP.md· markdown

86- install the CA into the host trust store or container trust store

87- verify `docker login` and `docker pull` do not prompt for certificate overrides

88- reject any deployment path that requires disabling certificate validation

Occurrences

1 occurrence · at L87

How to fix

Remove the approval-skipping instruction, or scope it narrowly to a specific safe, reversible action.

Delete blanket "don't ask / no need to confirm" directives from the skill.
If the skill is a genuine autonomous job, restrict the opt-out to a named non-destructive action rather than all actions.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-DONT-ASK-01sha256ddf2d66b96053d4a…rubric 365aacaView on GitHub

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

SKILL.md · 1 file

SKILL.md4.3 KB · Markdown

name: unifi

description: >

Manage UniFi network infrastructure via the UniFi MCP Server. Use this skill

for any task involving UniFi devices, clients, networks, VLANs, WiFi, firewall

rules, zone-based firewall, VPNs, traffic monitoring, backups, RADIUS, QoS,

DPI, port forwarding, ACLs, DHCP, DNS, or site management. Triggers when the

user mentions UniFi, Ubiquiti, network clients, APs, switches, gateways,

firewall policies, or traffic flows in a network management context.

triggers:

- UniFi

- Ubiquiti

- network clients

- access point

- UniFi switch

- UniFi gateway

- firewall policy

- VLAN management

- traffic flows

- SSID

- WiFi network

- site controller

UniFi MCP Server Skill

Interact with UniFi Network, Protect and the UniFi cloud APIs using 343 MCP tools (local mode) across six capability domains. The server supports three API modes (local gateway, cloud-v1, cloud-ea) and requires UniFi Network 9.0+ for zone-based firewall features.

Quick Setup

Via MCP (recommended for full tool access)

Add to your MCP client config (~/.claude/mcp.json or equivalent):

{
  "mcpServers": {
    "unifi": {
      "command": "uvx",
      "args": ["unifi-mcp-server"],
      "env": {
        "UNIFI_API_KEY": "your-api-key",
        "UNIFI_API_TYPE": "local",
        "UNIFI_LOCAL_HOST": "192.168.2.1"
      }
    }
  }
}

Via CLI (scoped invocation without loading all tools into context)

# Install
pip install unifi-mcp-server
# or: uvx unifi-mcp-server --help

# Set credentials once
export UNIFI_API_KEY=your-api-key
export UNIFI_API_TYPE=local
export UNIFI_LOCAL_HOST=192.168.2.1

# Run any tool directly
unifi-cli list-clients --site default
unifi-cli get-device-details --site default --device-id <id>

Scoped MCP profiles (reduce context footprint)

Start the server with only the tools you need:

UNIFI_PROFILE=network unifi-mcp-server    # clients, VLANs, WiFi, DHCP, DNS
UNIFI_PROFILE=devices unifi-mcp-server    # device management and control
UNIFI_PROFILE=security unifi-mcp-server   # firewall, VPN, ACLs, content filtering
UNIFI_PROFILE=system unifi-mcp-server     # backups, QoS, traffic flows, sites
UNIFI_PROFILE=protect unifi-mcp-server    # cameras, NVRs, sensors, alarms

Capability Domains

Network Operations (`skills/unifi-network/`)

Clients · VLANs · WiFi (SSIDs) · DHCP reservations · DNS · WAN · Vouchers

Device Management (`skills/unifi-devices/`)

Inventory · Adoption · Restarts/upgrades · Radio config · Port profiles · Switching/stacks · Topology · Diagnostics

Security (`skills/unifi-security/`)

Firewall rules · Firewall groups · Zone-based firewall (ZBF) · ACLs · Port forwarding · VPN · Site-to-site VPN · Content filtering

System & Monitoring (`skills/unifi-system/`)

Sites · Multi-site aggregation · Backups · QoS / traffic routes · Traffic flow analytics · DPI · RADIUS · Guest portal · Hotspot packages

Environment Variables

Variable	Description	Default
`UNIFI_API_KEY`	API key from UniFi controller or unifi.ui.com	required
`UNIFI_API_TYPE`	`local`, `cloud-v1`, or `cloud-ea`	`cloud-ea`
`UNIFI_LOCAL_HOST`	Gateway IP (local mode only)	—
`UNIFI_DEFAULT_SITE`	Default site ID	`default`
`UNIFI_LOCAL_VERIFY_SSL`	Verify the console's TLS certificate (local mode)	`true`

API Mode Feature Matrix

Feature	local	cloud-v1	cloud-ea
Zone-based firewall	✅	❌	❌
Traffic flows	✅	❌	❌
Firewall rules/zones	✅	❌	❌
ACLs	✅	❌	❌
Traffic matching lists	✅	❌	❌
Device and client management	✅	❌	❌
Protect	✅	❌	❌
Sites and aggregate statistics	✅	✅	✅
Site Manager, Mobility, InnerSpace, Carrier (needs `UNIFI_SITE_MANAGER_ENABLED=true`)	✅	✅	✅

Usage Examples

# Check what clients are online on the main site
List all active clients on site "default"

# Investigate a device
Get details for the device with MAC aa:bb:cc:dd:ee:ff

# Firewall audit
List all firewall policies in zone-based firewall

# Bandwidth troubleshooting
Show top traffic flows for the last hour

# Backup before a change
Trigger a backup on site "default", then update the guest SSID password

unifi— agent skill

Is unifi safe to install?

UniFi MCP Server Skill

Quick Setup

Via MCP (recommended for full tool access)

Via CLI (scoped invocation without loading all tools into context)

Scoped MCP profiles (reduce context footprint)

Capability Domains

Network Operations (`skills/unifi-network/`)

Device Management (`skills/unifi-devices/`)

Security (`skills/unifi-security/`)

System & Monitoring (`skills/unifi-system/`)

Environment Variables

API Mode Feature Matrix

Usage Examples

Audit the pieces. Scan the whole. Decide.

Is unifi safe to install?

UniFi MCP Server Skill

Quick Setup

Via MCP (recommended for full tool access)

Via CLI (scoped invocation without loading all tools into context)

Scoped MCP profiles (reduce context footprint)

Capability Domains

Network Operations (skills/unifi-network/)

Device Management (skills/unifi-devices/)

Security (skills/unifi-security/)

System & Monitoring (skills/unifi-system/)

Environment Variables

API Mode Feature Matrix

Usage Examples

Audit the pieces. Scan the whole. Decide.

Network Operations (`skills/unifi-network/`)

Device Management (`skills/unifi-devices/`)

Security (`skills/unifi-security/`)

System & Monitoring (`skills/unifi-system/`)