skills/firecrawl/cli/firecrawl-agent/Gen Agent Trust Hub

firecrawl-agent

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the firecrawl command to autonomously navigate websites and extract data into structured JSON format. This command execution is the primary intended function of the skill and is controlled by user-provided parameters.
  • [EXTERNAL_DOWNLOADS]: The skill documentation refers to npx firecrawl, which downloads the Firecrawl package from the npm registry. As this tool belongs to the skill's author, it is considered a safe and standard dependency for the skill's operation.
  • [PROMPT_INJECTION]: The skill processes content from external websites, creating a surface for potential indirect prompt injection. This is an inherent risk of data extraction tools. * Ingestion points: Untrusted data is ingested from external websites via the firecrawl agent command as described in SKILL.md. * Boundary markers: No specific delimiters or instructions to ignore embedded content are present in the skill configuration. * Capability inventory: The skill has the capability to execute the firecrawl command and write results to the local filesystem using the -o or --output flag. * Sanitization: There is no documentation of sanitization or filtering of the retrieved web content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 11:00 PM