firecrawl-scraper
Warn
Audited by Socket on Jun 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose matches web-scraping behavior and the network target appears to be Firecrawl’s official API, but the skill relies on an unreviewed local Node wrapper from a personal publisher and asks the agent to execute it with an API key. This is more a medium trust/supply-chain and credential-forwarding concern than confirmed malicious behavior.
Confidence: 79%Severity: 54%
Audit Metadata