firecrawl-crawl

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow recursively crawls and extracts web page content from arbitrary external websites via a crawler API, which exposes the agent to outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill crawls websites via Frevana Firecrawl (/start-crawl, /crawl), which involves paid submissions and debiting/billing (DEBITING, BILLED, consumed credits) authenticated via FREVANA_TOKEN Bearer authentication. This constitutes a direct financial operation (charges/paid usage). Independent access control is enforced via the Frevana service API credentials (FREVANA_TOKEN JWT) gating the backend API calls.