agentmods.dev

unifi-network-audit

unifi-network-audit is a skill for Claude Code from mikeholownych/unifi-mcp. It costs 38 tokens per session (845 once invoked), scanned A, original, MIT.

A read-only health check and report for a UniFi network. UniFi is a system for managing network devices such as gateways, switches, and WiFi access points from a controller.

In plain words
What is it for?
Use it to inspect devices and clients, find offline or poorly adopted equipment, review network and security settings, and prepare a UniFi status report.
Why use it?
It brings device health, connected clients, configuration, and security observations into one report without changing the network. It also makes limitations clear when the available login method cannot provide all data.

Skill for Claude Code

Written for Claude Code: argument-hint in frontmatter.

not rated 0repo 12d ago A scan 38 tokens original MIT

Good fit Use it to inspect devices and clients, find offline or poorly adopted equipment, review network and security settings, and prepare a UniFi status report.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/mikeholownych/unifi-mcp/unifi-network-audit
View source ↗ mikeholownych/unifi-mcp
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add mikeholownych/unifi-mcp --skill unifi-network-audit
Clone the repo
git clone --depth 1 https://github.com/mikeholownych/unifi-mcp

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for unifi-network-audit

README.md
[![agentmods](https://agentmods.dev/badge/skills/mikeholownych/unifi-mcp/unifi-network-audit/github.svg)](https://agentmods.dev/skills/mikeholownych/unifi-mcp/unifi-network-audit)
Your own site
<a href="https://agentmods.dev/skills/mikeholownych/unifi-mcp/unifi-network-audit"><img src="https://agentmods.dev/badge/skills/mikeholownych/unifi-mcp/unifi-network-audit/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for unifi-network-audit

Your own site · 80×15
<a href="https://agentmods.dev/skills/mikeholownych/unifi-mcp/unifi-network-audit"><img src="https://agentmods.dev/badge/skills/mikeholownych/unifi-mcp/unifi-network-audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 38 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 845 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00038 $0.00845
Opus 5 $0.00019 $0.00423
Sonnet 5 $0.00008 $0.00169
Haiku 4.5 $0.00004 $0.00085

Measured 12d ago against content hash 2a40cb2a70ae, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

unifi-network-audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/unifi-network-audit/SKILL.md · 85 lines

How it starts

The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Step 0 — Version check (always first)

Fetch get_sysinfo and note the Network application version. The controller facts in this skill were verified on Network 10.x / UniFi OS 5.x; on older versions expect differences (e.g., legacy stat/alarm exists, band steering uses an older flag). Adapt claims to the version you see.

UniFi Network Audit

Comprehensive read-only audit of a UniFi site: device health, client experience, configuration posture, and security observations, delivered as a structured report.

Context (read first)

  1. Confirm MCP connectivity with list_unifi_devices and list_sites.
  2. Determine the auth mode in effect:
    • local (session auth): full data — WLANs, firewall policies, events.
    • local_api_key / cloud: degraded — some tools return errors or empty results. Report the limitation once and continue with what is available.
    • If most tools fail with "not available via the Integration API", tell the user to switch UNIFI_MODE=local with a local admin account (SSO accounts with MFA cannot log in) and restart their MCP client.

Workflow

  1. Device inventory — get_device_health_summary
    • Note any device offline, pending adoption, or upgradable.
    • Record firmware versions and uptime anomalies (very low uptime = recent reboot/crash).
  2. Deep issue analysis — analyze_network_issues + get_optimization_recommendations
  3. Client experience — get_client_experience_report + list_clients
    • Flag clients with satisfaction < 80, signal < -70 dBm, or high roam counts.
  4. WiFi posture — get_wlans and per-AP radio state via list_devices
    • Check for: co-channel 2.4GHz overlap between APs, channel widths < 80MHz on 5GHz, legacy WPA (non-WPA3), hidden/guest SSIDs exposed unexpectedly.
  5. Firewall posture — get_firewall_policies (Network 9+)
    • Count custom vs predefined rules; note BLOCK/ALLOW ratio per zone pair; surface any ALLOW ALL rules to sensitive zones.
  6. Networks/VLANs — get_networks
    • Flag flat networks without VLANs, missing DHCP ranges, or IGMP settings inconsistent with IPTV needs.
  7. Optional live checks — offer (do not run unprompted): run_speed_test, then get_speed_test_status after ~60s.

Read the full file on GitHub · 85 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 12d ago First seen · 85 lines · 38 tokens per session scan A 2a40cb2a70ae

Subscribe to this mod's changes

unifi-network-audit is a skill published in the GitHub repository mikeholownych/unifi-mcp (0 stars, last pushed 12d ago), licensed MIT. It adds 38 tokens to every session and 845 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Hardware and IoT
Related

Other skills, from other repositories

gke-compute-classes

Configures, optimizes, and troubleshoots GKE ComputeClasses. Use when configuring Spot VMs with on-demand fallback, targeting specific accelerators (GPUs/TPUs) or machine families, restricting ComputeClass access, or debugging pending pods related to node pool auto-creation. Do not use for cluster-level Node Auto…

google/skills · 83 tokens

jetson-diagnostic

Read-only Jetson health snapshot for identity, memory, GPU, thermal, power, storage, services, and top processes.

NVIDIA/skills · 30 tokens

doca-socket-relay

Use this skill when the operator is driving the DOCA Socket Relay to bridge a socket-oriented host application onto a BlueField DPU peer without rewriting it — picking the deployment shape (in-process, sidecar, or BlueField service container), configuring the host-side socket and the DPU-side forwarding endpoint…

NVIDIA/skills · 236 tokens

offensive-z-wave

Z-Wave attack methodology — sniffing with Z-Force / EZ-Wave / RTL-SDR + ZniffMobile, S0 (legacy) network-key derivation flaw and key reuse, S2 (modern) ECDH commissioning analysis, replay/injection on unauthenticated nodes, default-key brute-force on test deployments, and home-automation hub pivots. Use when targeting…

SnailSploit/Claude-Red · 113 tokens

hsb-flash

Flash the FPGA on an HSB board connected to an NVIDIA devkit. Supports HSB Lattice boards (FPGA versions 2407, 2412, 2507, 2510) and Leopard Imaging VB1940 "all-in-one" cameras (FPGA versions 2507, 2510). Uses release-specific YAML manifests and board-type-specific program commands. Lattice and VB1940 commands must…

NVIDIA/skills · 94 tokens

jetson-validate-image

Use after jetson-flash-image to run static BSP checks, on-target smoke/regression tests on a flashed DUT, or both. Not for build or flash steps. Triggers: validate bsp, on-target validation.

NVIDIA/skills · 50 tokens