myco:live-smoke-testing
Facilitates live smoke testing against UniFi hardware, ensuring API contract validation and tool classification for robust CI processes.
Install this skill
or
78/100
Security score
The myco:live-smoke-testing skill was audited on May 23, 2026 and we found 6 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 55
Curl to non-GitHub URL
SourceSKILL.md
| 55 | curl -k https://$UNIFI_HOST |
medium line 6
Access to .env file
SourceSKILL.md
| 6 | testing against real UniFi hardware: .env credential setup, tool classification tiers, |
medium line 31
Access to .env file
SourceSKILL.md
| 31 | 1. **`.env` file at project root** (gitignored) with real credentials: |
low line 142
Access to .env file
SourceSKILL.md
| 142 | # Run all servers at once (requires full .env with Access and Protect creds) |
medium line 355
Access to .env file
SourceSKILL.md
| 355 | - **`.env` is gitignored — never commit credentials.** If you see `UNIFI_HOST` or |
low line 55
External URL reference
SourceSKILL.md
| 55 | curl -k https://$UNIFI_HOST |
Scanned on May 23, 2026
View Security Dashboard