firecrawl-developer-index
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill makes network requests to the domain
api.firecrawl.dev. This endpoint is a vendor-owned resource used for the skill's core search and scraping functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external, third-party sources such as GitHub issues, pull requests, and documentation pages, which creates a surface for indirect prompt injection.
- Ingestion points: External data enters the agent context via the output of the
firecrawl_developer_searchandfirecrawl_scrapetools. - Boundary markers: The skill instructions do not specify the use of delimiters or 'ignore' warnings for the external content retrieved.
- Capability inventory: The skill enables network requests to the Firecrawl API and supports fetching content from arbitrary web URLs.
- Sanitization: No evidence of sanitization, filtering, or validation of the retrieved external content is present in the skill instructions.
Audit Metadata