firecrawl-lead-research
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as intended for lead research and intelligence gathering. No malicious patterns or security risks were identified in the instructions or metadata.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external websites during the research phase, creating a potential surface for indirect prompt injection where malicious content on a scraped page could attempt to influence the agent's output.
- Ingestion points: Firecrawl search results and scraped content from company websites, news articles, and social profiles.
- Boundary markers: The skill does not explicitly define boundary markers or delimiters to isolate untrusted web content from the agent's primary instructions.
- Capability inventory: The agent's actions are restricted to information synthesis and brief generation; no capabilities for file modification, command execution, or network exfiltration were found.
- Sanitization: The skill relies on the agent's processing logic without explicit sanitization or filtering of external text.
Audit Metadata