firecrawl-download
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executefirecrawlandnpx firecrawl-clicommands. These commands are used to discover and download website content into the local.firecrawl/directory as specified inSKILL.md.- [EXTERNAL_DOWNLOADS]: The skill documentation mentions the use ofnpx firecrawl-cli, which downloads the vendor's command-line interface from the NPM registry. This is a standard practice for utilizing the vendor's official tools.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external websites, which presents a surface for indirect prompt injection if the downloaded content is later processed by the agent. - Ingestion points: The
firecrawl x downloadcommand inSKILL.mdcaptures web content and saves it to local files. - Boundary markers: Absent; the skill does not specify markers to delimit the untrusted content.
- Capability inventory: The skill is authorized to use the
Bashtool for local file operations and network requests as seen in theallowed-toolssection ofSKILL.md. - Sanitization: No explicit sanitization or filtering of the downloaded web content is described in the instructions.
Audit Metadata