firecrawl-scraper
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is installed from a third-party repository hosted at
https://github.com/BenedictKing/firecrawl-scraperusing thenpx skills addcommand. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest untrusted data from the web, which creates an attack surface for indirect prompt injection.
- Ingestion points: Processes raw web page content, screenshots, and PDF data via the Firecrawl API as described in
SKILL.md. - Boundary markers: The skill documentation does not mention the use of delimiters or specific instructions to the agent to disregard instructions found within the scraped content.
- Capability inventory: Includes deep web scraping, interacting with pages (clicking, scrolling), and crawling entire websites.
- Sanitization: There is no mention of sanitizing or filtering the content retrieved from external URLs before it is provided to the agent.
Audit Metadata