firecrawl-shop
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from external sources such as web pages, specifications, and forums (e.g., Reddit) through Firecrawl's scraping tools. This represents a potential surface for indirect prompt injection, where an attacker could embed instructions in product descriptions or reviews to manipulate the agent's behavior.
- Ingestion points: External websites and review platforms accessed via Firecrawl search and scrape commands.
- Boundary markers: The skill does not define explicit delimiters or instructions to the agent to disregard embedded commands in the retrieved web content.
- Capability inventory: The skill utilizes the Firecrawl browser for shopping-site navigation and automated cart actions.
- Sanitization: No explicit content filtering or sanitization of external data is specified before processing.
Audit Metadata