Unifi

Monitor and configure UniFi network infrastructure. Auto-routes between local gateway and cloud connector. Manage hosts, sites, devices, clients, WLANs, radi...

This skill appears to be what it claims: a UniFi Site Manager CLI that needs your UniFi API key and optionally a local gateway key/IP. Before installing: 1) Verify the source code (the GitHub homepage is listed) so you trust the script; 2) Store your API key securely — config.json is local but still sensitive; prefer using environment variables if your agent environment is isolated; 3) Note the doc/code mismatch about certificate pinning: the README suggests local access may work without a fingerprint, but the included script will exit unless a gateway_fingerprint is configured — expect to supply a pinned fingerprint for secure local access; 4) Limit the API key's scope on the UniFi portal if possible and rotate it if you suspect compromise; 5) Run the script in a trusted environment only (it performs network calls to api.ui.com and to any gateway IP you configure). If you want extra assurance, review the full scripts/unifi.py file (the code is included) before enabling the skill.

Type: OpenClaw Skill Name: unifi-site-manager Version: 3.2.1 The OpenClaw skill bundle is classified as benign. The `scripts/unifi.py` code interacts with legitimate UniFi cloud and local APIs, handling API keys and sensitive configuration (like `gateway_fingerprint` for TLS pinning) securely. It includes input sanitization (`_sanitize_path_param`) to prevent injection vulnerabilities in API paths. There is no evidence of data exfiltration to unauthorized endpoints, backdoor installation, or arbitrary command execution. The `SKILL.md` and `SETUP.md` files provide clear, non-malicious instructions for the AI agent and user, with the `openssl` command in `SETUP.md` being a safe, user-executed setup step for certificate pinning.