firecrawl-map
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill performs legitimate website mapping using the Firecrawl tool. No malicious intent, obfuscation, or unauthorized access patterns were detected.
- [EXTERNAL_DOWNLOADS]: The skill invokes npx firecrawl, which downloads the necessary package from the npm registry. This is a standard and expected operation for utilizing this tool.
- [SAFE]: The skill processes external website structure data. While this represents an ingestion point for untrusted data, the skill's specific role of listing URLs poses minimal risk of indirect prompt injection. 1. Ingestion points: External domain structures retrieved via firecrawl map. 2. Boundary markers: None present in the instructions. 3. Capability inventory: Uses the Bash tool to execute web discovery commands. 4. Sanitization: No explicit sanitization or validation of the retrieved URL content is performed.
Audit Metadata