Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add whisper-sec/whisper-cli --skill whisper-identitygit clone --depth 1 https://github.com/whisper-sec/whisper-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/whisper-sec/whisper-cli/whisper-identity)<a href="https://agentmods.dev/skills/whisper-sec/whisper-cli/whisper-identity"><img src="https://agentmods.dev/badge/skills/whisper-sec/whisper-cli/whisper-identity/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/whisper-sec/whisper-cli/whisper-identity"><img src="https://agentmods.dev/badge/skills/whisper-sec/whisper-cli/whisper-identity.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00066 | $0.00631 |
| Opus 5.5 | $0.00026 | $0.00252 |
| Sonnet 5.5 | $0.00013 | $0.00126 |
| Haiku 4.5 | $0.00007 | $0.00063 |
Grade C, and why
whisper-identity scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -fsSL https://get.whisper.online | sh Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fsSL https://get.whisper.online | sh How it starts
The opening of the file, as written. The whole thing — 73 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Whisper identity & egress
Whisper gives an agent its own routable IPv6 /128 on real address space (AS219419):
a stable source IP, reverse-DNS identity, and a local proxy its traffic leaves from.
One small CLI does everything; no root, standard ports.
1. Install
curl -fsSL https://get.whisper.online | sh
# or: brew install whisper-sec/tap/whisper
2. Authenticate (once)
Get a key from https://whisper.online, then:
export WHISPER_API_KEY="whisper_live_xxx" # your key
whisper login # or rely on the env var
3. Give the current project an identity
Pick the one that matches what you're running - each wires the working directory so
traffic egresses from the project's /128:
whisper init python # any Python agent framework (httpx/requests): LangChain, CrewAI, …
whisper init claude # Claude Code (and every subagent it spawns)
Then run normally:
whisper run python script.py # zero-config, all platforms
# or, after `whisper init python`, activate the printed env and run `python script.py`
4. Run any one-off command through the identity
No project setup needed:
whisper run curl -s https://api64.ipify.org # prints your Whisper /128
Verify
whisper run curl -s https://api64.ipify.org
# → a 2a04:2a01:… address (your agent's identity), not your host IP
Notes
- The proxy serves both HTTP-CONNECT and SOCKS5 on a local loopback port; most clients
pick it up from
HTTP_PROXY/HTTPS_PROXY/ALL_PROXYautomatically. aiohttpignores proxy env by default - passClientSession(trust_env=True).- Docs: https://whisper.online · CLI source (MIT): https://github.com/whisper-sec/whisper-cli
This file is served from the repository it lives in. Everything it tells you to install is
verified where it matters: every published whisper binary carries a detached PGP signature
made with the AS219419 release key (fingerprint EFF1663D992539682106A5EAD0F70908CF3B7929),
and the installer checks it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +2 lines 54f9f8d777b8
- 1mo ago First seen · 71 lines · 66 tokens per session scan C 8e31c6d279c2
whisper-identity is a skill published in the GitHub repository whisper-sec/whisper-cli (3 stars, last pushed today), licensed MIT. It adds 66 tokens to every session and 631 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
cloudflare-dns
Manage Cloudflare DNS with correct proxy (orange/grey) mode, TTL cutovers, zone backups, and scoped API tokens—avoid mail/ACME breakage and mixed proxied-record traps.
latchbio-integration
Latch platform for bioinformatics workflows. Build pipelines with Latch SDK, @workflow/@task decorators, deploy serverless workflows, LatchFile/LatchDir, Nextflow/Snakemake integration.
claw-admin
Claw system administration: service management, IM connections, logs, cron, and workspace diagnostics. Use when the user asks to manage claw services, connect/disconnect IM platforms, view logs, or perform system-wide operations.
x-nets
Enhanced netstat module with cached data and structured output. View network connections, routing tables, and interface statistics in interactive or TSV/CSV formats. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
x-theme
Change terminal command line prompt theme. Globally manage the display style of all x-cmd interactive components. Supports multiple theme vendors: theme, starship, ohmyposh. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
x-arp
Display ARP cache table with MAC vendor lookup and suspicious entry detection. Supports CSV, TSV, and TUI output. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.