firecrawl-build-onboarding
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official Firecrawl CLI (
firecrawl-cli) and SDKs (@mendable/firecrawl-js,firecrawl-py) from standard public registries (NPM and PyPI). These are recognized as legitimate vendor resources from the author, 'firecrawl'. - [COMMAND_EXECUTION]: The skill provides shell instructions for initialization using
npx, generating cryptographic parameters for authentication usingopenssl, and writing credentials to a.envfile. These commands facilitate the primary purpose of project setup and follow established best practices for secret management. - [INDIRECT_PROMPT_INJECTION]: The skill reads external documentation from the
docs.firecrawl.devdomain and processes user-supplied API keys. - Ingestion points: Documentation URLs in
SKILL.mdandFIRECRAWL_API_KEYinput. - Boundary markers: None explicitly defined in instructions.
- Capability inventory: Shell command execution (openssl, npx, npm, pip) and file writing (
.env). - Sanitization: Standard shell usage; specific sanitization of the API key string is not detailed in the snippets.
- [REMOTE_CODE_EXECUTION]: The initialization command
npx -y firecrawl-cli@latest initfetches and executes the vendor's CLI tool. As this is the intended functionality for setting up the vendor's service, it is considered safe.
Audit Metadata