firecrawl-scraper

Warn

Audited by Socket on Jun 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose matches web-scraping behavior and the network target appears to be Firecrawl’s official API, but the skill relies on an unreviewed local Node wrapper from a personal publisher and asks the agent to execute it with an API key. This is more a medium trust/supply-chain and credential-forwarding concern than confirmed malicious behavior.

Confidence: 79%Severity: 54%
Audit Metadata
Analyzed At
Jun 20, 2026, 12:15 AM
Package URL
pkg:socket/skills-sh/BenedictKing%2Fbenedictking-skills%2Ffirecrawl-scraper%2F@43fad87d4ed4055574ee4c7ac174794b9456ef1036bff4c13ca65fbdf7d9cbdd
Security Audit — socket — firecrawl-scraper