Feature detection, not credential creation
The tool checks for window.PublicKeyCredential and, if present, awaits PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable() and isConditionalMediationAvailable(). These are standard WebAuthn methods that report browser and OS capability without prompting for a fingerprint, face scan, or PIN, and without any network request or server involvement.