firecrawl-alexandria

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill provides instructions for the agent to transmit session telemetry (including target URLs and session objectives) to the Firecrawl platform via the firecrawl alexandria feedback command. This is a documented vendor feature intended for service improvement. A client-side opt-out is provided via the FIRECRAWL_NO_ENDPOINT_FEEDBACK or FIRECRAWL_DISABLE_ENDPOINT_FEEDBACK environment variables.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a discovery interface for web tools and API providers, creating an ingestion point for metadata that could potentially contain malicious instructions.
  • Ingestion points: Metadata and tool contracts retrieved from the Alexandria catalogue.
  • Boundary markers: None explicitly defined in this skill; execution context is managed by referenced search and scrape skills.
  • Capability inventory: Discovery and execution of third-party web tools and workflows.
  • Sanitization: No explicit sanitization or validation of catalogue metadata is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 12:56 PM