firecrawl-mcp

SUSPICIOUS: the skill’s stated purpose is web scraping/research, but it routes credentials and data through a third-party OneKey gateway rather than clearly direct official Firecrawl endpoints. Registry-based installs reduce pure supply-chain concern, but credential forwarding, intermediary data flow, arbitrary browser code execution, autonomous web actions, and TLS-bypass options make the overall skill high risk and disproportionate for a simple Firecrawl integration.