firecrawl-install-auth

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill follows secure development guidelines for handling sensitive credentials and integrating third-party services.
  • [CREDENTIALS_UNSAFE]: The instructions explicitly forbid hardcoding, committing, or transmitting API keys. Instead, they require the use of an approved secret manager for the FIRECRAWL_API_KEY and emphasize using the Authorization: Bearer header for REST requests.
  • [EXTERNAL_DOWNLOADS]: The skill references official Firecrawl SDKs (firecrawl for Node, firecrawl-py for Python) and directs the agent to official documentation at docs.firecrawl.dev and official GitHub repositories under the firecrawl organization. These are well-known and expected sources for the described functionality.
  • [COMMAND_EXECUTION]: The skill describes using standard package managers (npm, pip, yarn) to install official dependencies. No arbitrary or suspicious shell commands were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 01:34 AM