firecrawl-observability
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements authentication using
process.env.FIRECRAWL_API_KEY. This is a recommended security practice that avoids hardcoding secrets and relies on standard environment-based credential management. - [SAFE]: Network operations are restricted to official service endpoints, specifically
https://api.firecrawl.dev/v1/team/credits, which is used for the documented purpose of monitoring credit consumption. - [SAFE]: The skill includes explicit security guidance in its 'Output' section, instructing the agent not to include sensitive information like API keys, personal data, or full page content in metrics, traces, or alert payloads.
- [SAFE]: The content analysis performed on scraped data in the
evaluateQualityfunction is limited to basic structural and length checks (e.g., regex for structure and error strings) and does not involve executing the untrusted content or feeding it back into a prompt as instructions.
Audit Metadata