fingerprint-angular
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for ingesting visitor identification data from an external service and transmitting it to a backend endpoint.
- Ingestion points: The
FingerprintService.getVisitorData()method insnippets/login.component.tsretrieves data from the Fingerprint cloud service. - Boundary markers: None are specified for the retrieved data fields.
- Capability inventory: The skill uses
fetch()insnippets/login.component.tsto send the identifiers to a backend API. - Sanitization: The implementation does not explicitly sanitize the
event_idorvisitor_idstrings, though these are typically handled as opaque alphanumeric tokens. - [EXTERNAL_DOWNLOADS]: The skill references the
@fingerprint/angularpackage, which is the official SDK for the Fingerprint identification service.
Audit Metadata