firecrawl-research-patterns

Warn

Audited by Socket on Apr 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s research purpose broadly matches web scraping and corpus persistence, but its actual footprint is larger and riskier than a normal documentation skill. The main concerns are routing data through unverifiable private self-hosted services and Jina, recursive processing of untrusted web content with Bash/Write access, and the added Cloudflare-bypass wrapper. This is not confirmed malware, but it is a medium-high risk skill with meaningful prompt-injection and data-flow concerns.

Confidence: 86%Severity: 74%
Audit Metadata
Analyzed At
Apr 20, 2026, 09:38 AM
Package URL
pkg:socket/skills-sh/terrylica%2Fcc-skills%2Ffirecrawl-research-patterns%2F@3e4aca3fc760498a8779fc9f386f07db2fae30c3