firecrawl-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill follows secure development guidelines for handling sensitive credentials and integrating third-party services.
- [CREDENTIALS_UNSAFE]: The instructions explicitly forbid hardcoding, committing, or transmitting API keys. Instead, they require the use of an approved secret manager for the
FIRECRAWL_API_KEYand emphasize using theAuthorization: Bearerheader for REST requests. - [EXTERNAL_DOWNLOADS]: The skill references official Firecrawl SDKs (
firecrawlfor Node,firecrawl-pyfor Python) and directs the agent to official documentation atdocs.firecrawl.devand official GitHub repositories under thefirecrawlorganization. These are well-known and expected sources for the described functionality. - [COMMAND_EXECUTION]: The skill describes using standard package managers (npm, pip, yarn) to install official dependencies. No arbitrary or suspicious shell commands were identified.
Audit Metadata