Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward Firecrawl helper that sends searches and URLs to Firecrawl using the user's API key, with privacy caveats but no hidden or destructive behavior found.
Install only if you intend to use Firecrawl as an external web search/scraping service. Do not submit secret-bearing URLs, internal-only links, authenticated pages, customer data, or regulated content unless your organization approves sharing that information with Firecrawl. Keep the API key out of source control and rotate it if exposed.
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
)
try:
with urllib.request.urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except HTTPError as e:
print(f"Error: {e.code} - {e.reason}", file=sys.stderr)
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
)
try:
with urllib.request.urlopen(req, timeout=30) as resp:
return json.loads(resp.read().decode())
except HTTPError as e:
print(f"Error: {e.code} - {e.reason}", file=sys.stderr)
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
)
try:
with urllib.request.urlopen(req, timeout=60) as resp:
result = json.loads(resp.read().decode())
return result
except HTTPError as e:
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
)
try:
with urllib.request.urlopen(req, timeout=30) as resp:
result = json.loads(resp.read().decode())
return result
except HTTPError as e:
The code chunk accurately matches the web search portion of the description and correctly uses the declared FIRECRAWL_API_KEY environment variable. However, the declared purpose is broader than the actual implementation: there is no code for scraping pages, rendering or handling JS-heavy page extraction, crawling full sites, or extracting structured data. This is a description-to-behavior mismatch because the description claims multiple capabilities that are not present in the supplied code.
The skill advertises network access and use of an environment-sourced API key, but it does not declare any explicit tool scope such as permissions or allowed-tools. That creates an authorization and review gap: operators and users cannot easily tell what capabilities the skill is expected to use, which increases the chance of unintended network access or secret handling without clear policy constraints.
The skill description does not warn users that submitted URLs, search queries, and potentially scraped page contents are sent to an external third-party service. This can lead to accidental disclosure of sensitive internal URLs, tokens embedded in URLs, proprietary content, or regulated data if a user assumes processing is local.
The script forwards user-supplied URLs to Firecrawl, a third-party external service, without any explicit warning or consent step at runtime. In an agent-skill context, this can cause unintended disclosure of sensitive internal URLs, query parameters, or target resources to an external provider when users may assume scraping is local.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
print("Error: FIRECRAWL_API_KEY not set", file=sys.stderr)
sys.exit(1)
url = "https://api.firecrawl.dev/v1/search"
data = json.dumps({
"query": query,
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
print("Error: FIRECRAWL_API_KEY not set", file=sys.stderr)
sys.exit(1)
url = "https://api.firecrawl.dev/v1/search"
data = json.dumps({
"query": query,
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
print("Error: FIRECRAWL_API_KEY not set", file=sys.stderr)
sys.exit(1)
url = "https://api.firecrawl.dev/v1/search"
data = json.dumps({
"query": query,
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
print("Error: FIRECRAWL_API_KEY not set", file=sys.stderr)
sys.exit(1)
url = "https://api.firecrawl.dev/v1/search"
data = json.dumps({
"query": query,
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
print("Error: FIRECRAWL_API_KEY not set", file=sys.stderr)
sys.exit(1)
url = "https://api.firecrawl.dev/v1/search"
data = json.dumps({
"query": query,
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
print("Error: FIRECRAWL_API_KEY not set", file=sys.stderr)
sys.exit(1)
url = "https://api.firecrawl.dev/v1/search"
data = json.dumps({
"query": query,
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
print("Error: FIRECRAWL_API_KEY not set", file=sys.stderr)
sys.exit(1)
url = "https://api.firecrawl.dev/v1/search"
data = json.dumps({
"query": query,
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
print("Error: FIRECRAWL_API_KEY not set", file=sys.stderr)
sys.exit(1)
url = "https://api.firecrawl.dev/v1/search"
data = json.dumps({
"query": query,
The request payload forces lang to en and country to us, which imposes a specific language/locale policy on all searches. The script does not offer a user opt-in or configuration mechanism for other locales, and there is no documented justification that this is a region-specific tool.
The prerequisites instruct users to place an API key in the environment or a .env file but provide no guidance on secure credential handling. This increases the risk of accidental key exposure through shell history, checked-in .env files, logs, screenshots, or insecure local storage practices.
No suspicious patterns detected.