Security audit

Fingerprint CI Gate

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to be a straightforward CI helper for browser fingerprint checks, with normal CI supply-chain hardening considerations but no hidden or malicious behavior found.

Install this skill if you want help adding a liarjs fingerprint gate to CI, but harden the copied recipes before using them in sensitive pipelines: pin npm dependencies exactly, commit a lockfile, avoid dynamic npx installs in CI, pin Actions and container images where practical, and use --offline or a self-hosted endpoint when outbound request metadata is sensitive.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:26
Finding: Non-immutable third-party package retrieval and execution in CI
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Rp1

Medium

Category: MCP Rug Pull
Confidence: 75% confidence
Finding: Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Content: No source excerpt is available for this finding.

Tool Parameter Abuse

Low

Category: Tool Misuse
Confidence: 15% confidence
Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
Content: Scanner excerpt · references/ci-recipes.md (reported line 39)May include surrounding context.
FROM node:22-slim RUN apt-get update
&& apt-get install -y --no-install-recommends chromium ca-certificates fonts-liberation
&& rm -rf /var/lib/apt/lists/* ENV LIARJS_CHROME=/usr/bin/chromium USER node

text

Tool Parameter Abuse

Low

Category: Tool Misuse
Confidence: 15% confidence
Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
Content: Scanner excerpt · references/ci-recipes.md (reported line 39)May include surrounding context.
FROM node:22-slim RUN apt-get update
&& apt-get install -y --no-install-recommends chromium ca-certificates fonts-liberation
&& rm -rf /var/lib/apt/lists/* ENV LIARJS_CHROME=/usr/bin/chromium USER node

text

Chaining Abuse

Low

Category: Tool Misuse
Confidence: 15% confidence
Finding: Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.
Content: Scanner excerpt · references/ci-recipes.md (reported line 39)May include surrounding context.
FROM node:22-slim RUN apt-get update
&& apt-get install -y --no-install-recommends chromium ca-certificates fonts-liberation
&& rm -rf /var/lib/apt/lists/* ENV LIARJS_CHROME=/usr/bin/chromium USER node

text

Static analysis

No suspicious patterns detected.