firecrawl-developer-index
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it retrieves and processes content from external, untrusted sources such as public repositories, issues, and documentation pages.
- Ingestion points: Data enters the agent's context through the output of
firecrawl_developer_search,firecrawl_search, andfirecrawl_scrape, which retrieve markdown content (including code blocks and tables) from the web. - Boundary markers: The instructions do not define clear delimiters or specific warnings to the agent to disregard instructions embedded within the fetched developer content.
- Capability inventory: The skill allows the agent to perform network requests to the Firecrawl API and scrape arbitrary URLs, providing a pathway for external content to influence agent behavior.
- Sanitization: There is no evidence of content sanitization or instruction filtering before the external data is presented to the agent.
Audit Metadata