firecrawl

Warn

Audited by Socket on Jun 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core web-scraping purpose is coherent, and Firecrawl itself appears to be an official same-org CLI, so this is not malware. However, the skill overreaches by enabling cloud browser automation with logins, routes data through a third-party service, processes untrusted web content with bash available, and includes a mismatched `npx firecrawl` execution path that does not match official docs.

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
Jun 27, 2026, 12:15 PM
Package URL
pkg:socket/skills-sh/rmsite%2Fskills%2Ffirecrawl%2F@f619ba6de3578598b8988d12c86a9d87e5caece2922f416bd284c5025ed838d6