firecrawl-alexandria
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill provides instructions for the agent to transmit session telemetry (including target URLs and session objectives) to the Firecrawl platform via the
firecrawl alexandria feedbackcommand. This is a documented vendor feature intended for service improvement. A client-side opt-out is provided via theFIRECRAWL_NO_ENDPOINT_FEEDBACKorFIRECRAWL_DISABLE_ENDPOINT_FEEDBACKenvironment variables. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a discovery interface for web tools and API providers, creating an ingestion point for metadata that could potentially contain malicious instructions.
- Ingestion points: Metadata and tool contracts retrieved from the Alexandria catalogue.
- Boundary markers: None explicitly defined in this skill; execution context is managed by referenced search and scrape skills.
- Capability inventory: Discovery and execution of third-party web tools and workflows.
- Sanitization: No explicit sanitization or validation of catalogue metadata is described.
Audit Metadata