Skills/skills.sh/browser-fingerprint-audit

browser-fingerprint-audit@r1

CAUTION

Publisher claims: "Audit a browser fingerprint for internal contradictions with the liarjs CLI - canvas, WebGL, WebGL2, WebGPU, audio, 220 fonts, WebRTC and timezone probes, scored against the TLS/HTTP/ASN view of the same request. Use when asked to run a browser fingerprint test, see what a fingerprint looks like, check canvas or WebGL fingerprint stability, compare a spoofed profile against a real browser, or find out whether a browser profile is self-consistent." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher liarjsdev · joined 1 days agoInstalls 98,689Last detonated 29 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packageSKILL.md:20 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:21 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:22 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressSKILL.md:83 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageSKILL.md:23 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

URL using raw IP addressSKILL.md:83 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

npx invocation of non-well-known packageSKILL.md:83 · npx invocation of non-well-known package — may execute untrusted code

AST06