firecrawl

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s basic purpose is coherent, and the CLI appears to come from the same org behind the docs/site, so this is not confirmed malware. However, the integration routes Firecrawl access and credentials through ClawLink instead of Firecrawl directly, creating a third-party proxy and credential dependency that is broader than the skill title suggests. The conflicting API-key/setup claims further reduce trust.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Jun 28, 2026, 02:44 PM
Package URL
pkg:socket/skills-sh/clawlink-hq%2Fskills%2Ffirecrawl%2F@4e60d0f6f6c6d2827bbcb267aa8bfad68ccc1df5df33f399af638ec29e63b473
Security Audit — socket — firecrawl