firecrawl-download
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes the
firecrawlcommand-line tool via Bash to automate the process of mapping a site and scraping its pages into local directories. - [EXTERNAL_DOWNLOADS]: Utilizes
npxto dynamically retrieve and execute thefirecrawlpackage from the public npm registry, which is a standard distribution method for this tool. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it ingests and processes content from external, untrusted websites.
- Ingestion points: Website content (markdown, text, screenshots) downloaded from user-provided URLs.
- Boundary markers: None; the skill does not implement specific delimiters or safety instructions to isolate scraped content from the agent's logic.
- Capability inventory: The agent has access to the
Bashtool, which can execute system commands. - Sanitization: No content validation or sanitization of the downloaded data is performed before it is added to the agent's context.
Audit Metadata