browser-fingerprint-audit
Audit a browser fingerprint for internal contradictions with the liarjs CLI
by liarjsdevFree
Description
Browser fingerprint audit is an agent skill that runs the liarjs command-line tool to check whether a browser's fingerprint is internally consistent. A browser controls its own JavaScript but not the network it connects over, so liarjs reads the fingerprint inside the browser, reads the TLS, HTTP and network view from the edge that served the request, and reports every place where the two accounts disagree. The probes cover canvas, WebGL, WebGL2, WebGPU, audio, a list of 220 fonts, WebRTC and timezone. Each failing check deducts points from a score that starts at 100, and results are grouped as Trustworthy at 85 and above, Suspicious at 60 and above, and Likely spoofed or bot below that. The skill runs a throwaway Chrome with npx liarjs. Options include an offline mode that runs only the JavaScript-layer checks with no outbound request, a flag to list the checks that passed, and a flag to save the full result as JSON for later comparison. It suits people who operate or test browser automation and want to see where their setup contradicts itself.…
Highlights
- Compares browser JavaScript with the network view
- Probes canvas, WebGL, audio, fonts and WebRTC
- Scores from 100 with clear trust bands
- Offline mode with no outbound request
- Saves results as JSON for comparison
Ratings & Reviews
No ratings yet
Be the first to rate browser-fingerprint-audit.
People also visit
browser-fingerprint-audit FAQ
What does the audit check?
Whether the browser's self-reported fingerprint agrees with itself and with what the network layer observed, across canvas, WebGL, WebGPU, audio, fonts, WebRTC and timezone.
How do I run it?
Run npx [email protected] to launch a throwaway Chrome and scan it. Add --all to list the passing checks too.
What does the score mean?
It starts at 100 and each failing check takes away its weight. 85 and above is Trustworthy, 60 and above is Suspicious, and anything below is Likely spoofed or bot.
Does it need a network connection?
The full scan makes an outbound request to read the network view. The --offline option runs only the JavaScript-layer checks and sends no outbound request.
Can I compare runs?
Yes. Use --json to save the full result to a file and compare later runs against it.
What security audits has it passed?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
What are the best browser-fingerprint-audit alternatives?
Popular alternatives to browser-fingerprint-audit include fingerprint-ci-gate, lfg and playwright-stealth-verify. See all browser-fingerprint-audit alternatives