Please report vulnerabilities privately (GitHub private vulnerability reporting, or the maintainer's contact), never in a public issue, and never attach real sessions, tokens or personal data.

In scope:

• any way to make the app or the MCP server write to the platform (attendance, progress, tests) despite the guard;
• leaks of tokens, sessions, downloaded files or personal data;
• writing files outside the workspace, or reaching hosts outside the profile allowlist;
• injected content (pages, transcripts, handouts) leading to the above.

Out of scope: vulnerabilities of the university platforms themselves (report them to the university).