firecrawl-scrape
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto execute thefirecrawlCLI tool.npxis a standard utility that fetches packages from the well-known npm registry. Thefirecrawlpackage is the official tool provided by the author. - [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands using the
firecrawlandnpx firecrawlbinaries. These operations are limited to the specific tools allowed in the skill's configuration and are necessary for its primary function of web scraping. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest content from external, untrusted URLs, which is an inherent characteristic of scraping tools.
- Ingestion points: External website content fetched via URLs.
- Boundary markers: The skill does not explicitly define markers to separate untrusted web content from agent instructions in this file.
- Capability inventory: The skill can execute the
firecrawlCLI and write output to local files (e.g., in the.firecrawl/directory). - Sanitization: The skill provides a
--redact-piiflag to remove sensitive information and aims to return cleaned markdown optimized for LLM consumption.
Audit Metadata