firecrawl-scraper
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard integration for the Firecrawl API, used for web scraping and data extraction. All behaviors align with the stated purpose of the skill.
- [EXTERNAL_DOWNLOADS]: The skill references official SDKs such as
firecrawl-pyand@mendable/firecrawl-jsfrom standard registries like PyPI and NPM. These are established libraries for the Firecrawl service and are used according to standard development practices. - [COMMAND_EXECUTION]: Template scripts perform expected operations, such as directory creation and file writing for storing scraped data. These actions are limited to the skill's documented functionality and do not include arbitrary command execution.
- [DATA_EXFILTRATION]: Network communication is exclusively directed toward the official Firecrawl API domain (
api.firecrawl.dev). The skill correctly guides users to manage credentials via environment variables rather than hardcoding them, mitigating the risk of accidental credential exposure. - [PROMPT_INJECTION]: No evidence of malicious prompt injection, behavior overrides, or safety filter bypasses was found in the instructions, metadata, or documentation.
Audit Metadata