firecrawl
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
firecrawl-clipackage via npm and references documentation from the Firecrawl service. These are standard operations for enabling the skill's core functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes external web content, which serves as a potential vector for indirect prompt injection attacks.
- Ingestion points: Web page content and search results retrieved through
scrape,search, andcrawlcommands (SKILL.md). - Boundary markers: The skill documentation enforces the use of the
-oflag to direct output to the.firecrawl/directory, isolating untrusted data from the immediate context window (rules/security.md). - Capability inventory: The skill is configured to use the
Bashtool to executefirecrawlandnpx firecrawlcommands (SKILL.md). - Sanitization: Guidelines specify the use of shell quoting for URLs and suggest using incremental data processing tools like
grep,head, andjqto inspect content safely (rules/security.md).
Audit Metadata