skills/jeremylongshore/claude-code-plugins-plus-skills/firecrawl-core-workflow-b/Gen Agent Trust Hub
firecrawl-core-workflow-b
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill describes a workflow that ingests results from the FireCrawl API (web scraping), which serves as an ingestion point for untrusted external data. \n- Ingestion points: External web content retrieved via FireCrawl API results. \n- Boundary markers: The skill does not define specific delimiters or instructional guardrails to isolate ingested content from the agent's logic. \n- Capability inventory: The skill is granted access to powerful tools including Bash (npm), Read, Write, and Edit, which increases the potential impact of an injection. \n- Sanitization: No logic is provided for sanitizing or validating the output from the API before processing it within the agent context.
Audit Metadata