firecrawl-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external web content, which presents a surface for indirect prompt injection attacks.
- Ingestion points: External data is pulled into the agent's context through the
scrapeUrlandbatchScrapeUrlsmethods inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are included in the implementation snippets to protect the agent from malicious instructions hidden in scraped content.
- Capability inventory: The skill enables
Read,Write, andEdittools, meaning an injection could potentially influence file system operations or data modification. - Sanitization: The skill lacks logic to sanitize, filter, or validate the content retrieved from remote URLs before it is processed by the agent.
Audit Metadata