The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites.
Ingestion points: External URLs provided to the download command in SKILL.md.
Boundary markers: No specific boundary markers or instructions to ignore embedded commands are defined for the scraped data.
Capability inventory: The skill utilizes shell access to map and download files (SKILL.md).
Sanitization: No sanitization or validation of the scraped content is performed before storage.
[EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and execute the firecrawl-cli package from the npm registry. This is the official and expected distribution method for the tool.
[COMMAND_EXECUTION]: The skill executes firecrawl and npx firecrawl-cli commands to map site structures and download web content to the local filesystem.

firecrawl-download