firecrawl-map
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the firecrawl CLI using npx. This is a standard vendor-provided utility.
- [REMOTE_CODE_EXECUTION]: Utilizes npx to dynamically download and run the firecrawl package from the npm registry.
- [COMMAND_EXECUTION]: Executes shell commands via firecrawl to discover URLs and writes results to the local .firecrawl/ directory.
- [INDIRECT_PROMPT_INJECTION]: The skill processes sitemaps and URLs from external domains, creating an ingestion point for potentially untrusted data. Ingestion points: Website URLs and structure data retrieved during mapping. Boundary markers: No explicit delimiters provided for tool output. Capability inventory: Shell command execution and file system writes. Sanitization: No specific filtering or escaping described for the mapped data.
Audit Metadata