firecrawl-dashboard-reporting
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external dashboards, creating an attack surface where malicious instructions on a webpage could influence the agent's actions.
- Ingestion points: Data is ingested from arbitrary external dashboard URLs specified in the workflow inputs as described in
SKILL.md. - Boundary markers: The instructions do not define explicit delimiters or instructions to ignore embedded commands within the scraped dashboard content.
- Capability inventory: The skill uses the Firecrawl browser to interact with UIs, including clicking buttons, expanding sections, and extracting metrics.
- Sanitization: There is no evidence of sanitization or filtering of the content retrieved from the web before it is processed by the agent.
Audit Metadata