OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill uses the Firecrawl CLI to download website content to local directories. While it performs legitimate command execution and package fetching from the vendor's registry, it processes untrusted web content which presents a surface for indirect prompt injection.
Detected behaviors
No alerts
1 issue
Score: 93/100 · 2 sections analyzed