firecrawl-research-index
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and API endpoints for Firecrawl (api.firecrawl.dev, docs.firecrawl.dev, and firecrawl.dev). These are well-known services and the references are used neutrally for configuration and guidance.
- [DATA_EXPOSURE]: Includes instructions for handling API keys (FIRECRAWL_API_KEY). It explicitly advises against unsafe practices, such as asking users to paste keys into chat transcripts or logging them, and recommends using environment variables.
- [INDIRECT_PROMPT_INJECTION]: The skill acknowledges the risk of processing external data (abstracts and passages) and includes a defensive instruction to treat returned content as untrusted source content rather than instructions for the agent.
- [COMMAND_EXECUTION]: Provides examples of using the official Firecrawl CLI (
firecrawl research ...). This is a legitimate tool usage pattern for the stated purpose of the skill.
Audit Metadata