firecrawl-core-workflow-b

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill describes a workflow that ingests results from the FireCrawl API (web scraping), which serves as an ingestion point for untrusted external data. \n- Ingestion points: External web content retrieved via FireCrawl API results. \n- Boundary markers: The skill does not define specific delimiters or instructional guardrails to isolate ingested content from the agent's logic. \n- Capability inventory: The skill is granted access to powerful tools including Bash (npm), Read, Write, and Edit, which increases the potential impact of an injection. \n- Sanitization: No logic is provided for sanitizing or validating the output from the API before processing it within the agent context.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 11:25 AM