firecrawl-multi-env-setup

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard boilerplate code and configuration files for environment management. All external resources, including the @mendable/firecrawl-js library and the mendableai/firecrawl Docker image, are associated with the official Firecrawl service or well-known providers like Redis.
  • [SAFE]: Secrets management follows best practices. API keys are sourced from environment variables (process.env) or CI/CD secrets (${{ secrets.FIRECRAWL_API_KEY_STAGING }}). Example values provided in the documentation are clearly marked as placeholders (e.g., fc-prod-xxx).
  • [INDIRECT_PROMPT_INJECTION]: As a web-scraping utility, the skill inherently processes external content from URLs. While this is a vulnerability surface, the skill implements basic safeguards like environment-specific page limits (maxPagesPerCrawl) to mitigate large-scale scraping risks. No malicious intent or bypass patterns were detected in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 01:34 AM