fingerprint-ci-gate
Add Fingerprint Regression Gates to CI
Browser fingerprint changes can silently break automated Chromium workflows. This skill adds repeatable liarjs scans, baseline comparisons, and score gates to CI pipelines.
安裝前請停止並請求確認。
請審查安裝計畫，並在變更檔案前取得使用者明確同意。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
Review the Skillstore skill "fingerprint-ci-gate" from https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate.md and its manifest at https://skillstore.io/api/skills/liarjsdev-fingerprint-ci-gate/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「fingerprint-ci-gate」。 Add a fingerprint gate to a GitHub Actions job.
預期結果:
- Use Node.js 22 and a version-pinned liarjs dependency.
- Run the headless scan with a minimum score of 60.
- Upload the scan report even when the gate fails.
正在使用「fingerprint-ci-gate」。 Our datacenter runner always fails the timezone check.
預期結果:
Use a baseline comparison from the same runner mode. Document the timezone exception instead of lowering the global score threshold.
正在使用「fingerprint-ci-gate」。 Keep fingerprint tests inside our network.
預期結果:
Use offline mode for JavaScript checks or direct the cross-layer checks to an approved self-hosted endpoint.
安全審計
高風險Most static alerts are false positives caused by Markdown formatting or ordinary shared-memory documentation. Confirmed risks include executing a third-party package and sending fingerprint checks to an external endpoint. The anti-detection framing can facilitate unauthorized bot evasion.
已確認的安全問題 (1)
能力複核項目 (4)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
風險因素
📁 檔案系統存取 (2)
⚙️ 外部命令 (17)
🌐 網路存取 (1)
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/liarjsdev-fingerprint-ci-gate/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/liarjsdev-fingerprint-ci-gate.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
liarjsdev. (2026). fingerprint-ci-gate security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate/audits/1BibTeX 引用
@techreport{liarjsdev-liarjsdev-fingerprint-ci-gate-2026,
author = {liarjsdev},
title = {fingerprint-ci-gate security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "fingerprint-ci-gate security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "liarjsdev"
date-released: "2026-08-08"
url: "https://skillstore.io/skills/liarjsdev-fingerprint-ci-gate/audits/1"
identifiers:
- type: other
value: "skillstore:liarjsdev-fingerprint-ci-gate:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中你可以打造什麼
Protect Browser Automation Builds
Add a fingerprint baseline comparison before deploying changes to a Chromium automation harness.
Standardize CI Fingerprint Checks
Create repeatable score gates and artifacts across GitHub Actions or GitLab CI.
Verify Test Browser Consistency
Assert specific fingerprint checks inside an existing Playwright suite.
試試這些提示
Add a version-pinned liarjs fingerprint check to my GitHub Actions workflow. Use Node.js 22 and fail when the score is below 60.
Create a CI workflow that saves scan.json, compares it with baseline.json, and uploads the current scan after every run.
Adapt my fingerprint gate for an air-gapped GitLab runner. Use offline mode and explain which checks are unavailable.
Add authorized fingerprint assertions to my Playwright suite. Ignore only documented environment-specific checks and prevent unrelated score changes from hiding failures.
最佳實務
- Pin liarjs with an exact version and a committed lockfile.
- Create baselines in the same browser mode and runner environment used by CI.
- Store scan artifacts and explain every deliberate baseline change.
避免
- Do not disable the Chromium sandbox to make a container start.
- Do not lower a global threshold to hide one environment-specific check.
- Do not use fingerprint testing against systems without explicit authorization.
常見問題
What does the CI gate measure?
Which runtime does the skill require?
Should I use a score floor or a baseline?
Does the scan make network requests?
How should I update a baseline?
Can this run inside Playwright?
開發者詳細資訊
作者
liarjsdev授權
MIT
Skillstore 修訂
r1
版本提示
作者未聲明版本。
引用
9939e94735a710f16446f189eea126372136575b
維護新鮮度
2026/8/9
使用量
0 次下載 · 0 次瀏覽
檔案結構