firecrawl-crawl
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx firecrawl-clito download and execute the CLI tool from a public registry, which is a standard procedure for tools provided by this vendor. - [COMMAND_EXECUTION]: The skill instructs the agent to use
Bashfor runningfirecrawlandnpxcommands to execute crawl jobs and monitor credit usage. - [INDIRECT_PROMPT_INJECTION]: The skill provides an interface to ingest untrusted data that could influence agent behavior.
- Ingestion points: External website content is fetched by the
crawlcommand and stored in.firecrawl/crawl.json. - Boundary markers: There are no instructions or delimiters provided to ensure the agent distinguishes the crawled data from its internal instructions.
- Capability inventory: The skill allows for command execution via
Bash. - Sanitization: No sanitization or verification of the external site content is performed before the agent reads it.
Audit Metadata