스킬 browser-fingerprint-audit

📦

browser-fingerprint-audit

Name: browser-fingerprint-audit
Author: liarjsdev

콘텐츠 리비전 r1 중간 위험 ⚙️ 외부 명령어🌐 네트워크 접근📁 파일 시스템 접근

Audit Browser Fingerprint Consistency

Contradictory browser and network signals can reveal automation or spoofing. This skill runs liarjs checks and explains the resulting consistency score.

지원: Claude Codex Code(CC)

📊 65 적절함

Maintain this Skill? Claim it 📊 65 적절함

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "browser-fingerprint-audit" from https://skillstore.io/skills/liarjsdev-browser-fingerprint-audit.md and its manifest at https://skillstore.io/api/skills/liarjsdev-browser-fingerprint-audit/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/liarjsdev-browser-fingerprint-audit.md 서명된 manifest GET /api/skills/liarjsdev-browser-fingerprint-audit/manifest 서명된 lockfile GET /api/skills/liarjsdev-browser-fingerprint-audit/lockfile

테스트해 보기

"browser-fingerprint-audit" 사용 중입니다. Audit a temporary browser and summarize only failed checks.

예상 결과:

Score: 82 of 100. Classification: Suspicious.
Failed check: navigator.webdriver. The automation flag is enabled.
Failed check: timezone mismatch. The browser timezone differs from the IP-derived timezone.

"browser-fingerprint-audit" 사용 중입니다. Run an offline audit and explain the coverage.

예상 결과:

The audit completed using local browser signals only. It evaluated 32 checks and skipped eight cross-layer network checks.

"browser-fingerprint-audit" 사용 중입니다. Explain why a headless browser received a low score.

예상 결과:

The low score reflects observable headless and automation signals. It measures profile consistency and does not predict a specific website response.

보안 감사

중간 위험

v1 • 2026. 8. 8. 버전별 보고서 열기

Three static findings are confirmed. Two commands execute a pinned npm package, while the default network path sends request metadata to liarjs.dev. Other detections are markdown or documented local behavior, but optional CDP attachment can access an existing browser session.

스캔된 파일

177

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (1)

중간

SKILL.md:78-89

Existing Browser Session Access

The optional CDP workflow can drive an existing browser, open tabs, and read page state. Authenticated session content may therefore become accessible.

The skill explicitly states that CDP attachment can open a tab and read page state in the user's session.

기능 검토 항목 (3)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

중간

SKILL.md:19-24

Ruby/shell backtick execution

```bash

The Bash block directs the agent to run npx liarjs@0.3, which downloads or executes an external npm package and launches a browser.

중간

SKILL.md:82-84

Ruby/shell backtick execution

```bash

The Bash block runs npx liarjs@0.3 and attaches it to a CDP endpoint, executing an external package against a browser session.

중간

SKILL.md:41

Hardcoded URL

- The network half works by having the browser under test fetch `https://liarjs.dev/api/net.json`,

The default online scan fetches liarjs.dev and exposes request metadata including IP, ASN, headers, HTTP, TLS, and ClientHello characteristics.

위험 요인

⚙️ 외부 명령어 (20)

🌐 네트워크 접근 (6)

SKILL.md:41 SKILL.md:83 SKILL.md:98 SKILL.md:99 SKILL.md:64 SKILL.md:83

📁 파일 시스템 접근 (1)

SKILL.md:35

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/liarjsdev-browser-fingerprint-audit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/liarjsdev-browser-fingerprint-audit/security.svg)](https://skillstore.io/skills/liarjsdev-browser-fingerprint-audit?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/liarjsdev-browser-fingerprint-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/liarjsdev-browser-fingerprint-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/liarjsdev-browser-fingerprint-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

liarjsdev. (2026). browser-fingerprint-audit security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/liarjsdev-browser-fingerprint-audit/audits/1

BibTeX 인용

@techreport{liarjsdev-liarjsdev-browser-fingerprint-audit-2026,
  author = {liarjsdev},
  title = {browser-fingerprint-audit security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/liarjsdev-browser-fingerprint-audit/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "browser-fingerprint-audit security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "liarjsdev"
date-released: "2026-08-08"
url: "https://skillstore.io/skills/liarjsdev-browser-fingerprint-audit/audits/1"
identifiers:
  - type: other
    value: "skillstore:liarjsdev-browser-fingerprint-audit:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Review an automation profile

Identify contradictory browser signals before using a controlled automation environment.

Investigate fingerprint drift

Examine canvas, graphics, font, timezone, and network mismatches after an environment change.

Assess privacy exposure

Run offline checks to understand which local browser characteristics are observable.

이 프롬프트를 사용해 보세요

Run a standard audit

Run the default browser fingerprint audit. Report the score, classification, failed check identifiers, and concise explanations.

Run an offline audit

Run the browser fingerprint audit in offline mode. Explain every failed local check and clearly list the skipped network checks.

Inspect selected signal groups

Audit this browser and focus on canvas, WebGL, WebGPU, fonts, WebRTC, and timezone. Explain contradictions and likely environmental causes.

Audit an existing browser session

Audit my running Chrome through the CDP endpoint I provide. Confirm the endpoint and session access risk before attaching.

모범 사례

Use offline mode when external network comparison is unnecessary.
Prefer a temporary browser profile unless the existing session is the explicit audit subject.
Compare unusual environments with a saved baseline instead of relying only on an absolute score.

피하기

Do not attach to an existing browser without explicit approval and endpoint confirmation.
Do not treat a high consistency score as proof that every website will trust the browser.
Do not send production browsing sessions or sensitive pages to untrusted endpoints.

자주 묻는 질문

What does the score measure?

It measures consistency among browser signals and the network view. It does not predict every website's detection decision.

Does the standard audit make a network request?

Yes. The online mode contacts liarjs.dev for IP, ASN, HTTP, TLS, header, and ClientHello observations.

Can the audit run without sending data externally?

Yes. Offline mode runs 32 browser-only checks and skips eight network comparison checks.

Does the default scan use my browser profile?

No. It launches a fresh temporary profile and removes that profile after the scan.

Can it scan an already running browser?

Yes, through an approved CDP endpoint. That access can open tabs and read page state in the existing session.

Why can a legitimate environment receive a low score?

Headless mode, datacenter networks, unusual fonts, locale settings, and browser version changes can create real consistency failures.

개발자 세부 정보

작성자

liarjsdev

라이선스

MIT

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/liarjsdev/liarjs-skills/tree/4068c79209753c74f895a4a5a6d117fcde8d94d1/skills/browser-fingerprint-audit

참조

17e49992c9f55842f934ecec5719e4745ba7b95a

유지보수 최신성

2026. 8. 9.

사용량

0 다운로드 · 0 조회

파일 구조

📁 references/

📄 checks.md

📄 SKILL.md