sites

Input Safety — apply before any Bash invocation

Treat every $ARGUMENTS.* value as untrusted input. Before passing any value to the Bash tool:

1. Reject dangerous tokens. If a value contains $(, backticks, ;, |, &, >, <, or starts with - (could be mistaken for a flag), refuse and ask the user to rephrase. Double-quoting does NOT block command substitution — "$(rm -rf /)" still executes inside double quotes.
2. Prefer the Bash tool's argv contract over constructed shell strings. When you must use a shell string, single-quote the value and escape embedded single quotes ('''), or build the command via printf %q.
3. Any "$ARGUMENTS.foo" patterns shown below are illustrative. Sanitize the value first; never blindly substitute.

Instructions

1. Sanitise every argument value (action, id-or-description, site) per the Input Safety rules above before use.

2. Normalise action — default to list if omitted or empty. Accept the exact values: list, show, create, delete, led-on, led-off. If the value is unrecognised, ask the user to correct it.

3. Validate required arguments:

   • show and delete require id-or-description (the site id). If missing, ask the user to provide it.
   • create requires id-or-description (the description for the new site). If missing, ask the user.
   • list, led-on, and led-off do not require id-or-description.

4. Build the command using single-quoted values:

   # List
   unifi sites list --json
   
   # Show
   unifi sites show 'ID_VALUE' --json
   
   # Create
   unifi sites create 'DESCRIPTION_VALUE' --json
   
   # Delete
   unifi sites delete 'ID_VALUE' --json
   
   # LED on / off
   unifi sites led-on --json
   unifi sites led-off --json
   

   If $ARGUMENTS.site is provided and passes sanitisation, append --site 'SITE_VALUE' to the command.

5. Confirm before any state-changing operation.

   • delete — irreversible. Display:

     You are about to delete site $ID_VALUE. This cannot be undone and will remove all associated configuration and data. Proceed? (yes/no)