The Agent Skills Directory

[CREDENTIALS_SAFE]: The skill correctly instructs users to manage the secret API key using environment variables (.env files) via the dotenv library. It includes explicit warnings to never send the secret key to the browser, keep it out of logs, and avoid client-side bundling.
[EXTERNAL_DOWNLOADS]: The skill references the official Fingerprint Node SDK (@fingerprint/node-sdk) and documentation (docs.fingerprint.com). All external resources belong to the verified vendor (FingerprintJS) and follow standard library integration patterns.
[REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The skill uses a standard NPM package for API communication without any use of eval(), exec(), or shell-piped downloads.
[DATA_EXFILTRATION]: The skill does not perform any unauthorized data exfiltration. It communicates solely with the official Fingerprint API to verify event IDs, which is the intended and documented purpose of the skill.
[INDIRECT_PROMPT_INJECTION]: While the skill processes external data (API responses), it implements robust 'fail-closed' logic. It verifies confidence scores, bot detection signals, and replay markers before trusting the identification, which mitigates risks associated with untrusted input processing.
[OBFUSCATION]: No obfuscation, hidden characters, or homoglyph attacks were detected in the instructions or code snippets.

fingerprint-node