Skills
skills/firecrawl/skills/firecrawl-build-onboarding/Gen Agent Trust Hub

firecrawl-build-onboarding

Pass

Audited by Gen Agent Trust Hub on Apr 11, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of official Firecrawl SDKs (@mendable/firecrawl-js and firecrawl-py) from public registries.
  • [COMMAND_EXECUTION]: Uses system utilities like openssl to securely generate parameters for the PKCE-based authentication flow and echo to manage environment variables.
  • [CREDENTIALS_UNSAFE]: Promotes secure secret management by instructing users to store API keys in .env files and explicitly warning against hardcoding credentials in source code.
  • [DATA_EXFILTRATION]: Communicates with the vendor's official domain (www.firecrawl.dev) for authentication status polling, which is expected and documented behavior for the onboarding process.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 11, 2026, 11:02 PM