firecrawl-build-interact
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill provides documentation and implementation guidelines but does not include any executable scripts or binary files.
- [EXTERNAL_DOWNLOADS]: The skill links to official documentation on the firecrawl.dev domain, which is the well-known service provider for the tool described.
- [CREDENTIALS_SAFE]: The skill defines a required input for an API key (FIRECRAWL_API_KEY) using standard configuration practices rather than hardcoding credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill documents workflows for interacting with third-party website content (such as form filling and navigation). This represents a surface for indirect prompt injection where malicious instructions on a website could influence agent behavior, which is an inherent risk of the tool's stated purpose.
Audit Metadata