스킬 fingerprint-ci-gate

📦

fingerprint-ci-gate

Name: fingerprint-ci-gate
Author: liarjsdev

콘텐츠 리비전 r1 높은 위험 📁 파일 시스템 접근⚙️ 외부 명령어🌐 네트워크 접근

Add Fingerprint Regression Gates to CI

Browser fingerprint changes can silently break automated Chromium workflows. This skill adds repeatable liarjs scans, baseline comparisons, and score gates to CI pipelines.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

설치 전에 중지하고 확인을 요청하세요.

계획을 검토하고 파일을 변경하기 전에 사용자의 명시적 동의를 받으세요.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "fingerprint-ci-gate" from https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate.md and its manifest at https://skillstore.io/api/skills/liarjsdev-fingerprint-ci-gate/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/liarjsdev-fingerprint-ci-gate.md 서명된 manifest GET /api/skills/liarjsdev-fingerprint-ci-gate/manifest 서명된 lockfile GET /api/skills/liarjsdev-fingerprint-ci-gate/lockfile

테스트해 보기

"fingerprint-ci-gate" 사용 중입니다. Add a fingerprint gate to a GitHub Actions job.

예상 결과:

Use Node.js 22 and a version-pinned liarjs dependency.
Run the headless scan with a minimum score of 60.
Upload the scan report even when the gate fails.

"fingerprint-ci-gate" 사용 중입니다. Our datacenter runner always fails the timezone check.

예상 결과:

Use a baseline comparison from the same runner mode. Document the timezone exception instead of lowering the global score threshold.

"fingerprint-ci-gate" 사용 중입니다. Keep fingerprint tests inside our network.

예상 결과:

Use offline mode for JavaScript checks or direct the cross-layer checks to an approved self-hosted endpoint.

보안 감사

높은 위험

v1 • 2026. 8. 8. 버전별 보고서 열기

Most static alerts are false positives caused by Markdown formatting or ordinary shared-memory documentation. Confirmed risks include executing a third-party package and sending fingerprint checks to an external endpoint. The anti-detection framing can facilitate unauthorized bot evasion.

스캔된 파일

212

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (1)

높음

SKILL.md:8-12 SKILL.md:35-37

Anti-Bot Evasion Enablement

The skill frames fingerprint consistency as a way to avoid rejected automated traffic and detect changes that expose headless scraping harnesses.

The text explicitly links fingerprint regressions to traffic rejection and describes tuning checks for datacenter environments. This supports anti-detection use beyond ordinary compatibility testing.

기능 검토 항목 (4)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

중간

SKILL.md:24-26

Ruby/shell backtick execution

```bash

The fenced example instructs users to execute a third-party npm package through npx. Version pinning reduces drift but does not remove package execution risk.

중간

SKILL.md:30-33

Ruby/shell backtick execution

```bash

The fenced block instructs users to run liarjs through npx and process local baseline files. This executes third-party package code in the build environment.

중간

SKILL.md:43-59

Ruby/shell backtick execution

```yaml

The YAML block contains CI steps that execute liarjs through npx and upload scan output. These are intentional external commands with package and artifact exposure risk.

낮음

SKILL.md:79

Hardcoded URL

fetches `https://liarjs.dev/api/net.json`; `--endpoint <url>` points that at your own deployment of

The documentation states that online scans fetch a fixed external endpoint. This exposes runner network metadata and fingerprint-related request data outside the controlled environment.

위험 요인

📁 파일 시스템 접근 (2)

references/ci-recipes.md:31 SKILL.md:16

⚙️ 외부 명령어 (17)

SKILL.md:11 SKILL.md:16 SKILL.md:24-26 SKILL.md:26-30 SKILL.md:30-33 SKILL.md:33-36 SKILL.md:36-39 SKILL.md:39-43 SKILL.md:43-59 SKILL.md:59-61 SKILL.md:61-66 SKILL.md:66-70 SKILL.md:70-72 SKILL.md:72-77 SKILL.md:77-79 SKILL.md:79 SKILL.md:88-90

🌐 네트워크 접근 (1)

SKILL.md:79

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/liarjsdev-fingerprint-ci-gate/security.svg)](https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/liarjsdev-fingerprint-ci-gate/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/liarjsdev-fingerprint-ci-gate.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

liarjsdev. (2026). fingerprint-ci-gate security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate/audits/1

BibTeX 인용

@techreport{liarjsdev-liarjsdev-fingerprint-ci-gate-2026,
  author = {liarjsdev},
  title = {fingerprint-ci-gate security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "fingerprint-ci-gate security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "liarjsdev"
date-released: "2026-08-08"
url: "https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate/audits/1"
identifiers:
  - type: other
    value: "skillstore:liarjsdev-fingerprint-ci-gate:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Protect Browser Automation Builds

Add a fingerprint baseline comparison before deploying changes to a Chromium automation harness.

Standardize CI Fingerprint Checks

Create repeatable score gates and artifacts across GitHub Actions or GitLab CI.

Verify Test Browser Consistency

Assert specific fingerprint checks inside an existing Playwright suite.

이 프롬프트를 사용해 보세요

Add a Basic Score Gate

Add a version-pinned liarjs fingerprint check to my GitHub Actions workflow. Use Node.js 22 and fail when the score is below 60.

Compare Against a Baseline

Create a CI workflow that saves scan.json, compares it with baseline.json, and uploads the current scan after every run.

Configure an Offline Runner

Adapt my fingerprint gate for an air-gapped GitLab runner. Use offline mode and explain which checks are unavailable.

Design a Playwright Gate

Add authorized fingerprint assertions to my Playwright suite. Ignore only documented environment-specific checks and prevent unrelated score changes from hiding failures.

모범 사례

Pin liarjs with an exact version and a committed lockfile.
Create baselines in the same browser mode and runner environment used by CI.
Store scan artifacts and explain every deliberate baseline change.

피하기

Do not disable the Chromium sandbox to make a container start.
Do not lower a global threshold to hide one environment-specific check.
Do not use fingerprint testing against systems without explicit authorization.

자주 묻는 질문

What does the CI gate measure?

It measures liarjs browser fingerprint consistency and can compare individual check results with a saved baseline.

Which runtime does the skill require?

The examples require Node.js 22 or newer and a discoverable Chrome, Chromium, or Edge browser.

Should I use a score floor or a baseline?

Use a baseline when your environment has known permanent failures. Use a score floor for stable, controlled runners.

Does the scan make network requests?

Online mode contacts liarjs.dev for cross-layer checks. Offline mode skips those checks, and a self-hosted endpoint is supported.

How should I update a baseline?

Refresh it in a dedicated commit and record the observed differences and reason.

Can this run inside Playwright?

Yes. The reference shows checkPage assertions against the page and browser configuration already used by the test suite.

개발자 세부 정보

작성자

liarjsdev

라이선스

MIT

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/liarjsdev/liarjs-skills/tree/4068c79209753c74f895a4a5a6d117fcde8d94d1/skills/fingerprint-ci-gate

참조

9939e94735a710f16446f189eea126372136575b

유지보수 최신성

2026. 8. 9.

사용량

0 다운로드 · 0 조회

파일 구조

📁 references/

📄 ci-recipes.md

📄 SKILL.md