firecrawl-qa
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting and processing untrusted data from third-party websites during QA testing.
- Ingestion points: The skill retrieves content from external URLs using Firecrawl's map, scrape, and browser tools, as described in
SKILL.md. - Boundary markers: There are no explicit instructions or delimiters defined to separate untrusted website content from the agent's internal instructions.
- Capability inventory: The skill has the ability to interact with forms, navigate links, and extract content from any URL provided by the user.
- Sanitization: No specific filtering or sanitization of the scraped data is mentioned in the workflow.
Audit Metadata