# Visitor Audit

> Audit visitor activity by correlating Access badge scans with Network client connections. Use when the user wants to know who visited, when, and what devices they brought.

- Skill: `sirkirby/visitor-audit` (Agent Skill)
- Install (CLI): `npx skillmds@latest add sirkirby/visitor-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/sirkirby/visitor-audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: sirkirby (https://skillmd.com/u/sirkirby)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/sirkirby/visitor-audit

---


# Visitor Audit

You are auditing visitor activity by correlating physical access with network presence.

## What You Do

Given a time window (e.g., "today", "this week"), you:

1. Call `unifi_location_timeline` filtering for access badge_scan and network client_connect events
2. Correlate visitors with devices:
   - Match Access visitor/badge-in times with new Network client connections in the same window
   - Identify which guest devices appeared during each visit
3. Present a visitor log: who came, when, how long, and what devices they connected

## Requirements

- Access server must be connected (primary data source for visitor logs)
- Network server adds device correlation (which devices appeared during visits)

## Example Prompts

- "Who visited today and what devices did they bring?"
- "Visitor audit for this week — any unusual guest device activity?"
- "Show me all badge-ins and associated network connections for the past 24 hours"