wbso-whoami

This CLI performs expected WBSO.ai API and local context operations, but parse_args() has a command-injection risk because untrusted flag names are evaluated with eval. Sourced configuration files can also execute arbitrary shell code, and a malicious WBSO_API_BASE_URL could receive the bearer API key. The context command prints local Git information and Claude/Codex user prompts to stdout, but this code does not directly transmit those appended signals. Severity is moderate; no clear evidence of intentional malware or obfuscation is present.

SUSPICIOUS. The stated purpose is narrow and the visible behavior mostly fits, but the skill's core action is to discover and execute an existing local `wbso` executable from broad cache/skill paths without validating which copy is chosen. That creates a meaningful supply-chain and local path-trust risk, even though there is no clear evidence of credential theft or malicious data exfiltration in the provided skill text.