Skills
Navigate
skills/firecrawl/cli/firecrawl-agent/Gen Agent Trust Hub

firecrawl-agent

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill enables an agent to autonomously navigate and extract data from external websites. This processes untrusted data that could contain malicious instructions designed to influence the agent's logic.
  • Ingestion points: Website content retrieved via the firecrawl agent command.
  • Boundary markers: The instructions do not define specific delimiters to separate the retrieved web content from the agent's system instructions.
  • Capability inventory: The agent can execute shell commands using the firecrawl CLI and the npx package runner.
  • Sanitization: There is no evidence of content sanitization or filtering before the agent processes the scraped data.
  • [COMMAND_EXECUTION]: The skill is designed around the execution of shell commands to interact with the Firecrawl service.
  • Evidence: The skill uses firecrawl and npx firecrawl-cli to perform navigation, searching, and extraction tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 01:47 PM