fingerprint-ci-gate@r1

CAUTION

Publisher claims: "Gate a build on browser fingerprint regressions with liarjs - save a baseline scan as JSON, diff later runs against it, and fail the job when the consistency score falls below a floor. Use when asked to add a fingerprint or headless-detection check to GitHub Actions, GitLab CI or another pipeline, to catch a regression in a Chromium build or scraping harness before it ships, or to track how a fingerprint score changes across commits." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher liarjsdev · joined 1 days agoInstalls 98,616Last detonated 29 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packagereferences/ci-recipes.md:99 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/ci-recipes.md:23 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionSKILL.md:70 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packagereferences/ci-recipes.md:49 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/ci-recipes.md:22 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/ci-recipes.md:98 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:31 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:32 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Destructive file system command detectedreferences/ci-recipes.md:39 · Destructive file system command detected

AST05

HIGH

npx invocation of non-well-known packageSKILL.md:52 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:25 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Destructive file system command detectedreferences/ci-recipes.md:45 · Destructive file system command detected

AST05

HIGH

npx invocation of non-well-known packageSKILL.md:49 · npx invocation of non-well-known package — may execute untrusted code

AST06