pp-firecrawl
Warn
Audited by Socket on May 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core purpose is coherent with web crawling/scraping, and installs come from standard registries, but trust is weakened by publisher mismatch, credential forwarding into external CLIs, optional arbitrary webhook delivery, and MCP server installation. This looks more like a moderately risky third-party integration skill than confirmed malware.
Confidence: 84%Severity: 61%
Audit Metadata