firecrawl-market-research
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to search and scrape external websites, which introduces a surface for indirect prompt injection if an attacker-controlled site contains malicious instructions.
- Ingestion points: The instructions in SKILL.md specify reading external sources such as market reports, news, investor relations pages, and SEC filings.
- Boundary markers: The skill does not define specific delimiters (like XML tags or triple quotes) or provide instructions to the agent to ignore or escape instructions embedded within the source data.
- Capability inventory: The skill leverages Firecrawl's scraping and browser interaction tools to ingest data.
- Sanitization: There is no mention of sanitization, validation, or filtering of the content retrieved from external sources before it is processed by the agent.
Audit Metadata