firecrawl-download

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes the firecrawl command-line tool via Bash to automate the process of mapping a site and scraping its pages into local directories.
  • [EXTERNAL_DOWNLOADS]: Utilizes npx to dynamically retrieve and execute the firecrawl package from the public npm registry, which is a standard distribution method for this tool.
  • [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it ingests and processes content from external, untrusted websites.
  • Ingestion points: Website content (markdown, text, screenshots) downloaded from user-provided URLs.
  • Boundary markers: None; the skill does not implement specific delimiters or safety instructions to isolate scraped content from the agent's logic.
  • Capability inventory: The agent has access to the Bash tool, which can execute system commands.
  • Sanitization: No content validation or sanitization of the downloaded data is performed before it is added to the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 06:16 AM