firecrawl

SUSPICIOUS: the skill is mostly aligned with a web-scraping/search purpose and uses standard npm-based execution, but it expands into transitive skill installation, autonomous extraction jobs, and browser-session code execution while consuming untrusted web content at scale. No clear credential theft or malicious exfiltration is evident, yet the capability mix and indirect prompt-injection exposure make it a medium-risk skill rather than benign.