Firecrawler
v1.0.0Web scraping and crawling with Firecrawl API. Fetch webpage content as markdown, take screenshots, extract structured data, search the web, and crawl documentation sites. Use when the user needs to scrape a URL, get current web info, capture a screenshot, extract specific data from pages, or crawl docs for a framework/library.
⭐ 2· 3.6k·8 current·9 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description, SKILL.md and fc.py all implement web scraping, screenshots, extraction, search, crawling and mapping via the Firecrawl API — capabilities are coherent with the stated purpose. However the registry metadata declared no required environment variables while both SKILL.md and fc.py require FIRECRAWL_API_KEY, which is an inconsistency.
Instruction Scope
Runtime instructions are limited to installing the firecrawl SDK, setting FIRECRAWL_API_KEY, and running the bundled fc.py to call the Firecrawl API. The instructions do not ask the agent to read unrelated system files, secrets, or transmit data to unexpected endpoints.
Install Mechanism
There is no install spec in the registry and the skill is instruction-only, but SKILL.md instructs users to pip3 install the public 'firecrawl' Python package. This is a normal installation method; no direct downloads from arbitrary URLs or archive extraction are present in the skill itself.
Credentials
The code and SKILL.md both require FIRECRAWL_API_KEY (used as the SDK credential) which is appropriate for this service. However the registry metadata lists 'Required env vars: none' and 'Primary credential: none' — a mismatch that hides the need for an API key. The skill does not request additional unrelated credentials.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. It can be invoked autonomously (platform default), which increases blast radius if the API key is present, but this is expected for skills and not flagged alone.
What to consider before installing
This skill appears to be a thin wrapper over the Firecrawl SDK and behaves as advertised, but the registry metadata incorrectly omits the required FIRECRAWL_API_KEY and the skill's source/homepage is unknown. Before installing: (1) verify the publisher and the 'firecrawl' PyPI package (check project homepage, maintainers, and recent releases), (2) confirm you are comfortable providing your FIRECRAWL_API_KEY (it will be sent to the Firecrawl service), (3) review pricing/credit usage to avoid unexpected charges, and (4) avoid using the key in environments with sensitive internal-only URLs unless you trust the Firecrawl service and the skill source. If you want higher assurance, request the skill author to correct the metadata to declare the required env var and provide a homepage/source repository.Like a lobster shell, security has layers — review code before you run it.
latestvk976kthg5ejyvf3zzfyfyybyv17zyxg1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.