firecrawl

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most links are official (docs, npm, official GitHub), but the installed source (.skill-meta.json) points to a third‑party personal GitHub repo which is an untrusted distribution vector and raises supply‑chain/malware risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md describes a workflow where the user runs Firecrawl search --scrape / scrape <url> / map / crawl to fetch and extract third-party web page content (untrusted outsider text) that can then be read/used by the agent, creating an indirect prompt-injection path via fetched markdown.