The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes a local bash script (scripts/wbso) or a pre-installed wbso binary to fetch account information and display it to the user.
[DATA_EXPOSURE]: The included CLI script reads configuration and API keys from ~/.config/wbso/config to authenticate requests. It implements security best practices by setting restricted file permissions (chmod 600) and using a secure umask during configuration creation.
[EXTERNAL_DOWNLOADS]: The script uses curl to interact with portal.wbso.ai, which is the official domain for the skill's vendor (wbso-ai). These network operations are necessary for the skill's functionality.
[INDIRECT_PROMPT_INJECTION]: While not directly used by the 'whoami' command, the CLI script contains logic in other subcommands to ingest local data such as git logs and previous conversation history to provide context for compliance reporting. This ingestion uses XML-style boundary markers to help the agent distinguish between data and instructions.

wbso-whoami