firecrawl-download
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx firecrawl-cli, which downloads and executes the Firecrawl CLI package from the npm registry at runtime. This is a vendor-provided tool associated with the skill author. - [COMMAND_EXECUTION]: The skill uses shell commands through the Bash tool to execute
firecrawlandnpx firecrawl-clifor mapping and downloading site content. These commands are scoped to the vendor's CLI tools. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from external websites, which creates a potential surface for indirect prompt injection where malicious instructions embedded in a website could influence the agent's behavior.
- Ingestion points: External website content is fetched via
firecrawl x downloadand saved as local files. - Boundary markers: No specific delimiters or safety instructions are used to separate website content from the agent's system instructions.
- Capability inventory: The skill possesses the capability to execute shell commands via the
Bashtool. - Sanitization: The skill does not perform sanitization or validation of the downloaded content before the agent processes it.
Audit Metadata