firecrawl-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard boilerplate code and configuration files for environment management. All external resources, including the
@mendable/firecrawl-jslibrary and themendableai/firecrawlDocker image, are associated with the official Firecrawl service or well-known providers like Redis. - [SAFE]: Secrets management follows best practices. API keys are sourced from environment variables (
process.env) or CI/CD secrets (${{ secrets.FIRECRAWL_API_KEY_STAGING }}). Example values provided in the documentation are clearly marked as placeholders (e.g.,fc-prod-xxx). - [INDIRECT_PROMPT_INJECTION]: As a web-scraping utility, the skill inherently processes external content from URLs. While this is a vulnerability surface, the skill implements basic safeguards like environment-specific page limits (
maxPagesPerCrawl) to mitigate large-scale scraping risks. No malicious intent or bypass patterns were detected in the instructions.
Audit Metadata