firecrawl-scrape

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to execute the firecrawl CLI tool. npx is a standard utility that fetches packages from the well-known npm registry. The firecrawl package is the official tool provided by the author.
  • [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands using the firecrawl and npx firecrawl binaries. These operations are limited to the specific tools allowed in the skill's configuration and are necessary for its primary function of web scraping.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest content from external, untrusted URLs, which is an inherent characteristic of scraping tools.
  • Ingestion points: External website content fetched via URLs.
  • Boundary markers: The skill does not explicitly define markers to separate untrusted web content from agent instructions in this file.
  • Capability inventory: The skill can execute the firecrawl CLI and write output to local files (e.g., in the .firecrawl/ directory).
  • Sanitization: The skill provides a --redact-pii flag to remove sensitive information and aims to return cleaned markdown optimized for LLM consumption.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 04:39 AM
Security Audit — agent-trust-hub — firecrawl-scrape