firecrawl

Pass

Audited by Gen Agent Trust Hub on Mar 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts with the official Firecrawl API (api.firecrawl.dev) for web search, scraping, and crawling operations. Firecrawl is a recognized service for these tasks.\n- [SAFE]: Authentication is handled correctly via the FIRECRAWL_API_KEY environment variable, which is passed in HTTP headers as a Bearer token. No hardcoded secrets were detected.\n- [SAFE]: The Python scripts (crawl.py, scrape.py, and search.py) rely exclusively on standard library modules such as urllib.request, json, and argparse. This avoids the risk of malicious third-party dependencies.\n- [SAFE]: No evidence of prompt injection, code obfuscation, or unauthorized network activity outside of the primary service domain was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 17, 2026, 07:18 PM
Security Audit — agent-trust-hub — firecrawl