firecrawl-download
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes 'firecrawl' and 'npx firecrawl-cli' via the Bash tool. These operations are consistent with the skill's primary purpose of downloading site content for offline reference.
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves content from user-specified external URLs and saves them locally, creating a surface for indirect prompt injection if the agent processes the downloaded files.
- Ingestion points: Site content downloaded from external URLs (SKILL.md).
- Boundary markers: None identified in the provided command examples.
- Capability inventory: Bash command execution for managing downloads and local file storage.
- Sanitization: None; external site content is converted to markdown or text and stored directly in the '.firecrawl/' directory.
Audit Metadata