firecrawl-agent
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
firecrawlcommand to autonomously navigate websites and extract data into structured JSON format. This command execution is the primary intended function of the skill and is controlled by user-provided parameters. - [EXTERNAL_DOWNLOADS]: The skill documentation refers to
npx firecrawl, which downloads the Firecrawl package from the npm registry. As this tool belongs to the skill's author, it is considered a safe and standard dependency for the skill's operation. - [PROMPT_INJECTION]: The skill processes content from external websites, creating a surface for potential indirect prompt injection. This is an inherent risk of data extraction tools. * Ingestion points: Untrusted data is ingested from external websites via the
firecrawl agentcommand as described inSKILL.md. * Boundary markers: No specific delimiters or instructions to ignore embedded content are present in the skill configuration. * Capability inventory: The skill has the capability to execute thefirecrawlcommand and write results to the local filesystem using the-oor--outputflag. * Sanitization: There is no documentation of sanitization or filtering of the retrieved web content before it is processed by the agent.
Audit Metadata