fingerprint-angular

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for ingesting visitor identification data from an external service and transmitting it to a backend endpoint.
  • Ingestion points: The FingerprintService.getVisitorData() method in snippets/login.component.ts retrieves data from the Fingerprint cloud service.
  • Boundary markers: None are specified for the retrieved data fields.
  • Capability inventory: The skill uses fetch() in snippets/login.component.ts to send the identifiers to a backend API.
  • Sanitization: The implementation does not explicitly sanitize the event_id or visitor_id strings, though these are typically handled as opaque alphanumeric tokens.
  • [EXTERNAL_DOWNLOADS]: The skill references the @fingerprint/angular package, which is the official SDK for the Fingerprint identification service.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 03:14 PM