firecrawl-shop
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from websites, product reviews, and forums (e.g., Reddit) to recommend products and perform browser-based cart actions. Malicious content on these external pages could attempt to influence the agent's shopping recommendations or actions through embedded instructions.
- Ingestion points: Web research and scraping via Firecrawl search and scrape tools as defined in
SKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands within the fetched data are present in the skill instructions.
- Capability inventory: Browser navigation, authenticated session handling, and adding items to shopping carts as described in the process section of
SKILL.md. - Sanitization: No specific data sanitization, validation, or filtering steps are described for the gathered web content before it is processed by the model.
Audit Metadata