Whoami Tool Check

• Analyzed: May 16, 2026, 4:36 PM
• Findings: 1
• Version: 1.0.0
• Hash: 8c8f3fa73ae608579cdbbaa2db8b3f7c321c9e141918166cf1f74b3978a294af
• Source: palm
• External report: View on VirusTotal

Findings (1)

There is a significant discrepancy between the documentation and the actual implementation. SKILL.md describes a comprehensive identity and security auditing tool with features like sudo access verification (`--sudo`), role checking (`--role`), and system capability auditing (`--audit`), but the actual code in `scripts/whoami.py` is a trivial three-line script that only prints the current username and ignores all functional arguments. This misleading documentation could trick an AI agent into providing false assurances about system security or user privileges.