firecrawl-crawl

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx firecrawl-cli to download and execute the CLI tool from a public registry, which is a standard procedure for tools provided by this vendor.
  • [COMMAND_EXECUTION]: The skill instructs the agent to use Bash for running firecrawl and npx commands to execute crawl jobs and monitor credit usage.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides an interface to ingest untrusted data that could influence agent behavior.
  • Ingestion points: External website content is fetched by the crawl command and stored in .firecrawl/crawl.json.
  • Boundary markers: There are no instructions or delimiters provided to ensure the agent distinguishes the crawled data from its internal instructions.
  • Capability inventory: The skill allows for command execution via Bash.
  • Sanitization: No sanitization or verification of the external site content is performed before the agent reads it.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 04:24 PM