ClawHub

WebUntis

v1.0.1

Read-only access to Untis/WebUntis student timetables. Use when you need to fetch or summarize a student's current schedule (today/this week/date range), upcoming lessons, rooms, teachers, or substitutions from a WebUntis instance.

⭐ 2· 871·0 current·0 all-time
by@finnbusse
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the implementation: the bundled Python script contacts a WebUntis instance via JSON-RPC to fetch timetables. There are no unrelated environment variables, binaries, or service credentials requested.
✓
Instruction Scope
SKILL.md directs the agent/user to run the included script and supply WebUntis credentials via environment variables. Instructions explicitly avoid asking for passwords in chat and limit behavior to fetching timetable-related RPC methods; they do not instruct reading unrelated files or exfiltrating data to other endpoints.
✓
Install Mechanism
No install spec is provided (instruction-only with an included script). The script runs locally and uses the requests library; nothing is downloaded from third-party URLs or written to disk by an installer.
✓
Credentials
Required secrets are only the WebUntis connection values (BASE_URL, SCHOOL, USER, PASS, optional ELEMENT_TYPE/ID). The skill does not request unrelated tokens, cloud credentials, or other system secrets.
✓
Persistence & Privilege
Skill is not always-enabled and uses normal agent invocation. It does not request persistent system privileges or modify other skills or system-wide settings.
Assessment
This skill appears to do exactly what it claims: a local read-only client for a WebUntis instance. Before installing, ensure you: (1) only provide credentials for a dedicated read-only/student account you trust (do not paste passwords into chat), (2) supply the correct WEBUNTIS_BASE_URL so credentials go to the intended school server, and (3) review or run the included script in an isolated environment if you want extra assurance. If you lose trust in the WebUntis endpoint later, rotate the account password. If you need the agent to avoid calling this skill autonomously, restrict agent permissions or only invoke it manually.

Like a lobster shell, security has layers — review code before you run it.

latestvk977vcjfm2pcgx165xvt0dv7a980xa04

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments