firecrawl
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npx @useclawlink/cli, which downloads and executes the vendor's command-line interface from the NPM registry. - [COMMAND_EXECUTION]: The skill relies on shell command execution via the
@useclawlink/clitool to perform web scraping, crawling, and data extraction tasks. - [PROMPT_INJECTION]: The skill is designed to ingest and process data from external websites (scraping/crawling). This creates a surface for indirect prompt injection where untrusted content from the web could contain instructions meant to manipulate the agent. The skill does not currently include specific boundary markers or instructions for the agent to ignore commands embedded in the scraped content.
- Ingestion points: External URLs processed by
firecrawl_scrape,firecrawl_crawl, andfirecrawl_search(SKILL.md). - Boundary markers: None identified.
- Capability inventory: Subprocess execution via
npx @useclawlink/cli(SKILL.md). - Sanitization: None identified.
Audit Metadata