firecrawl-download

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute firecrawl and npx firecrawl-cli commands. These commands are used to discover and download website content into the local .firecrawl/ directory as specified in SKILL.md.- [EXTERNAL_DOWNLOADS]: The skill documentation mentions the use of npx firecrawl-cli, which downloads the vendor's command-line interface from the NPM registry. This is a standard practice for utilizing the vendor's official tools.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external websites, which presents a surface for indirect prompt injection if the downloaded content is later processed by the agent.
  • Ingestion points: The firecrawl x download command in SKILL.md captures web content and saves it to local files.
  • Boundary markers: Absent; the skill does not specify markers to delimit the untrusted content.
  • Capability inventory: The skill is authorized to use the Bash tool for local file operations and network requests as seen in the allowed-tools section of SKILL.md.
  • Sanitization: No explicit sanitization or filtering of the downloaded web content is described in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 12:49 AM
Security Audit — agent-trust-hub — firecrawl-download