Skills/skills.sh/playwright-stealth-verify

playwright-stealth-verify@r1

CAUTION

Publisher claims: "Check whether a Playwright, Puppeteer, Selenium or CDP-driven browser presents a coherent fingerprint, using liarjs as a library against a Page you already have - navigator.webdriver, HeadlessChrome tokens, worker versus main-thread identity, patched-API integrity, WebGL versus WebGPU GPU identity. Use when asked whether an automated browser looks like a normal one, when a headless setup or a stealth plugin's effect needs measuring rather than assuming, or when an assertion on fingerprint quality belongs in a test suite." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher liarjsdev · joined 1 days agoInstalls 98,650Last detonated 29 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packageSKILL.md:47 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:59 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressSKILL.md:47 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressSKILL.md:47 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

npx invocation of non-well-known packageSKILL.md:55 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

URL using raw IP addressSKILL.md:55 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addressSKILL.md:55 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07