WebUntis

• Verdict: Pass
• Confidence: High
• Analyzed: Feb 11, 2026, 9:41 AM
• Findings: 0
• Version: 1.0.1

Overview

The skill is coherent: it implements a local, read-only WebUntis JSON-RPC client that only needs the WebUntis credentials/URL you provide and does not request unrelated access or install external code.

This skill appears to do exactly what it claims: a local read-only client for a WebUntis instance. Before installing, ensure you: (1) only provide credentials for a dedicated read-only/student account you trust (do not paste passwords into chat), (2) supply the correct WEBUNTIS_BASE_URL so credentials go to the intended school server, and (3) review or run the included script in an isolated environment if you want extra assurance. If you lose trust in the WebUntis endpoint later, rotate the account password. If you need the agent to avoid calling this skill autonomously, restrict agent permissions or only invoke it manually.