firecrawl-crawl
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from external websites, creating a surface for potential tool output poisoning attacks.\n
- Ingestion points: The
firecrawl crawlcommand retrieves content from external URLs as described in SKILL.md.\n - Boundary markers: The skill lacks explicit boundary markers or instructions to isolate external content from the agent's logic.\n
- Capability inventory: The agent can execute bash commands and write files (e.g., .firecrawl/crawl.json) as shown in SKILL.md.\n
- Sanitization: The instructions do not specify any sanitization or filtering of the content retrieved from external sources.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx firecrawl-cli, which downloads the vendor-owned CLI tool from the public npm registry.
Audit Metadata