← Back to Skills Marketplace
dinghaibin

Whoami Tool Check

by BIN · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
82
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install whoami-tool-check
Description
Identity verification utility — validate current user against expected roles, check sudo access, and audit user capabilities. Extended whoami for security an...
README (SKILL.md)

Whoami Tool Check — Identity & Access Verifier

Extended identity verification: confirm the current user matches an expected role, verify sudo/root access, check group membership for specific capabilities, and audit user-level access for security-sensitive operations.

Quick Start

# Verify current user
whoami-tool-check

# Check if current user has sudo access
whoami-tool-check --sudo

Usage

whoami-tool-check [OPTIONS]

Options:
  --sudo          Check if user has sudo/root access
  --role ROLE     Verify user belongs to a role group (sudo, docker, admin, etc.)
  --capabilities  List all accessible system capabilities
  --audit         Full user audit: uid, gid, groups, sudo, shell, home
  --json          Output as structured JSON
  --check-user USER   Check if a specific user exists and their details

Examples

# Full audit
whoami-tool-check --audit

# Check if user has docker access
whoami-tool-check --role docker

# List all capabilities
whoami-tool-check --capabilities

# Check if another user exists
whoami-tool-check --check-user www-data

# JSON for pipeline ingestion
whoami-tool-check --audit --json

Features

  • Current identity — standard whoami output
  • Sudo access check — passwordless sudo availability
  • Role verification — check group membership for specific roles
  • User audit — comprehensive report (uid, gid, groups, sudo, shell, home dir)
  • User existence — verify other system users
  • JSON output — structured for security audits and automation
  • Exit codes — 0/1 for easy script integration
Usage Guidance
This skill does not show malicious behavior in the provided artifacts. However, its documentation is much broader than its included Python script, so treat it as a simple username utility unless you independently verify that the installed `whoami-tool-check` command actually supports the advertised audit options.
Capability Analysis
Type: OpenClaw Skill Name: whoami-tool-check Version: 1.0.0 There is a significant discrepancy between the documentation and the actual implementation. SKILL.md describes a comprehensive identity and security auditing tool with features like sudo access verification (`--sudo`), role checking (`--role`), and system capability auditing (`--audit`), but the actual code in `scripts/whoami.py` is a trivial three-line script that only prints the current username and ignores all functional arguments. This misleading documentation could trick an AI agent into providing false assurances about system security or user privileges.
Capability Assessment
Purpose & Capability
The stated purpose is local identity and access verification, which is coherent with a whoami-style utility, but the provided script only prints the current username and does not implement the advertised sudo, role, capability, audit, JSON, or other-user checks.
Instruction Scope
The documented commands involve checking local account and privilege metadata, which is purpose-aligned for an identity audit tool, but users should not rely on the advertised broader checks unless the actual executable implementation is verified.
Install Mechanism
There is no install spec and no declared binary requirement, while the documentation refers to a `whoami-tool-check` command. This looks like incomplete packaging rather than malicious behavior.
Credentials
The documented audit features would inspect local user, group, sudo, shell, and home-directory information. That is proportionate to the stated purpose, but it is still local identity/privilege metadata.
Persistence & Privilege
No persistence, background execution, credential use, network access, privilege escalation, or destructive behavior is shown in the provided artifacts.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install whoami-tool-check
  3. After installation, invoke the skill by name or use /whoami-tool-check
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Slug whoami-tool-check
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Whoami Tool Check?

Identity verification utility — validate current user against expected roles, check sudo access, and audit user capabilities. Extended whoami for security an... It is an AI Agent Skill for Claude Code / OpenClaw, with 82 downloads so far.

How do I install Whoami Tool Check?

Run "/install whoami-tool-check" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Whoami Tool Check free?

Yes, Whoami Tool Check is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Whoami Tool Check support?

Whoami Tool Check is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Whoami Tool Check?

It is built and maintained by BIN (@dinghaibin); the current version is v1.0.0.

💬 Comments