firecrawl-scraper
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation provides installation instructions that fetch content from a third-party repository on GitHub.
- Evidence: github.com/BenedictKing/firecrawl-scraper
- Method: npx installation.
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection due to its core function of processing data from external, untrusted web sources.
- Ingestion points: Web content, PDF documents, and screenshots fetched via the Firecrawl API as described in SKILL.md.
- Boundary markers: The provided instructions do not include specific delimiters or warnings to isolate external content from the agent's primary instructions.
- Capability inventory: The skill enables extensive web crawling, deep content extraction, and parsing of external files.
- Sanitization: No content sanitization or verification procedures are mentioned in the skill documentation.
Audit Metadata