firecrawl-download

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx firecrawl-cli, which downloads and executes the Firecrawl CLI package from the npm registry at runtime. This is a vendor-provided tool associated with the skill author.
  • [COMMAND_EXECUTION]: The skill uses shell commands through the Bash tool to execute firecrawl and npx firecrawl-cli for mapping and downloading site content. These commands are scoped to the vendor's CLI tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from external websites, which creates a potential surface for indirect prompt injection where malicious instructions embedded in a website could influence the agent's behavior.
  • Ingestion points: External website content is fetched via firecrawl x download and saved as local files.
  • Boundary markers: No specific delimiters or safety instructions are used to separate website content from the agent's system instructions.
  • Capability inventory: The skill possesses the capability to execute shell commands via the Bash tool.
  • Sanitization: The skill does not perform sanitization or validation of the downloaded content before the agent processes it.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 04:27 PM