The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute firecrawl commands and run firecrawl-cli via npx. These commands are used to discover URLs and scrape content into a local directory.
[EXTERNAL_DOWNLOADS]: The skill uses npx firecrawl-cli, which downloads the necessary command-line interface from the official NPM registry. This is a standard and safe method for accessing the vendor's scraping tools.
[INDIRECT_PROMPT_INJECTION]: Because the skill is designed to ingest and save content from external websites, it creates a surface for indirect prompt injection. Malicious instructions could be present on scraped websites to influence the agent if it subsequently reads those files.
Ingestion points: External data is fetched from arbitrary URLs via the firecrawl x download command as described in SKILL.md.
Boundary markers: There are no specific delimiters or instructions provided to the agent to distinguish between the skill's instructions and the content of the downloaded data.
Capability inventory: The skill is granted Bash permissions in SKILL.md to perform scraping tasks and write files to the .firecrawl/ directory.
Sanitization: The instructions do not include steps for sanitizing or filtering the downloaded content for potential malicious prompts.

firecrawl-download