firecrawl

Warn

Audited by Socket on May 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent for a web automation skill and the main API endpoints appear to be official Firecrawl infrastructure, but the skill is overly expansive, has an install-doc mismatch, and grants broad remote browser/code-execution capability through hosted services and a partly third-party execution stack. This looks more like a high-trust external web automation platform than a minimal helper skill.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
May 10, 2026, 12:57 AM
Package URL
pkg:socket/skills-sh/mahmoud20138%2FTradecraft%2Ffirecrawl%2F@6ee08c6ce22a8a712e091a05c1b773b65a1f23db
Security Audit — socket — firecrawl