The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill installs and updates the firecrawl-cli package from the official npm registry. This is a standard procedure for a well-known developer tool.
[COMMAND_EXECUTION]: The skill utilizes the system shell to execute the firecrawl CLI and npx commands to perform web research, scraping, and authentication tasks.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted third-party data from the web, which carries an inherent risk of indirect prompt injection.
Ingestion points: Untrusted data enters the context through search, scrape, map, and crawl operations as defined in SKILL.md.
Boundary markers: rules/security.md defines mitigation strategies including file-based isolation in the .firecrawl/ directory and incremental reading of outputs.
Capability inventory: The agent's capabilities are scoped to the firecrawl CLI operations and local file management within the specified output directory.
Sanitization: The skill includes explicit instructions for the agent to ignore any commands or instructions found within the fetched web content and to only extract relevant data.

firecrawl