flarecrawl-extraction
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the
flarecrawlCLI tool alongside standard Unix utilities such asjq,grep, andcat. These tools are used for their intended purposes: mapping URLs, extracting data, filtering results, and creating configuration files (e.g.,schema.json). - [INDIRECT_PROMPT_INJECTION]: The skill describes a process that ingests untrusted data from external websites via the
flarecrawl extractcommand. - Ingestion points: Data enters the environment via the
--urlsand--batchflags inSKILL.mdworkflows. - Boundary markers: The skill encourages the use of structured JSON schemas (
--schema,--schema-file) to constrain the AI's output shape, which serves as a defensive boundary against unstructured content. - Capability inventory: The skill uses the
flarecrawlbinary and standard shell tools for data processing. - Sanitization: Extraction relies on Cloudflare Workers AI schema validation to ensure the output matches the expected JSON format.
Audit Metadata