The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill makes network requests to api.firecrawl.dev which is the official endpoint for the Firecrawl service. These requests are necessary for the skill's primary function of web searching and scraping.- [CREDENTIALS_UNSAFE]: The skill uses the FIRECRAWL_API_KEY environment variable to manage authentication. It does not contain hardcoded secrets; instead, it provides instructions for users to set their own keys securely in their environment, which is a standard and safe practice.- [COMMAND_EXECUTION]: The skill contains Python scripts (scripts/search.py, scripts/scrape.py, scripts/crawl.py) that perform network operations. These scripts use the standard urllib library and do not execute arbitrary shell commands or untrusted external code.- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external websites (via Firecrawl). While this represents a surface for indirect prompt injection, the risk is inherent to any web-scraping tool, and the skill itself does not have elevated privileges or unsafe interpolation that would escalate this beyond a baseline risk.

firecrawl