firecrawl-scrape
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and process markdown content from external URLs, creating an attack surface for indirect prompt injection.
- Ingestion points: External URLs scraped via the
firecrawlcommand as specified in the usage examples. - Boundary markers: The instructions do not specify the use of delimiters or provide guidance to the agent to disregard instructions within the scraped content.
- Capability inventory: The agent is granted access to the
firecrawlandnpx firecrawlshell commands for scraping and querying web content. - Sanitization: No evidence of sanitization or validation of the scraped content is present in the skill instructions.
- [EXTERNAL_DOWNLOADS]: The skill configuration allows the use of
npx firecrawl, which downloads the Firecrawl CLI from the npm registry for execution.
Audit Metadata