skills/jeremylongshore/claude-code-plugins-plus-skills/firecrawl-webhooks-events/Gen Agent Trust Hub
firecrawl-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the official
@mendable/firecrawl-jsSDK and the standardexpresslibrary to implement webhook endpoints, which is appropriate for its stated purpose. - [SAFE]: Sensitive information is handled securely by referencing the
FIRECRAWL_API_KEYas an environment variable rather than hardcoding credentials. - [SAFE]: Analysis of the data ingestion surface for Indirect Prompt Injection (Category 8):
- Ingestion points: Data enters the system via the POST request body in the
/webhooks/firecrawlendpoint. - Boundary markers: None are present in the code snippets, as they serve as basic implementation examples.
- Capability inventory: The skill allows use of
Read,Write,Edit, andBashtools. - Sanitization: Standard for integration guides, the code demonstrates routing data to storage/indexing functions without explicit sanitization logic, which is expected for boilerplate code. The behavior is consistent with the skill's primary purpose.
Audit Metadata