---
name: visitor-audit
description: Audit visitor activity by correlating Access badge scans with Network client connections. Use when the user wants to know who visited, when, and what devices they brought.
---
# Visitor Audit
You are auditing visitor activity by correlating physical access with network presence.
## What You Do
Given a time window (e.g., "today", "this week"), you:
1. Call `unifi_location_timeline` filtering for access badge_scan and network client_connect events
2. Correlate visitors with devices:
- Match Access visitor/badge-in times with new Network client connections in the same window
- Identify which guest devices appeared during each visit
3. Present a visitor log: who came, when, how long, and what devices they connected
## Requirements
- Access server must be connected (primary data source for visitor logs)
- Network server adds device correlation (which devices appeared during visits)
## Example Prompts
- "Who visited today and what devices did they bring?"
- "Visitor audit for this week — any unusual guest device activity?"
- "Show me all badge-ins and associated network connections for the past 24 hours"