firecrawl-reference-architecture
Implement Firecrawl reference architecture with scrape/crawl/map/extract pipelines. Use when designing new Firecrawl integrations, reviewing project structure, or building content ingestion pipelines for AI/RAG applications. Trigger with phrases like "firecrawl architecture", "firecrawl project structure", "firecrawl pipeline", "firecrawl RAG", "firecrawl knowledge base".
72
—
Does it follow best practices?
Impact
—
No eval scenarios have been run
Advisory
Suggest reviewing before use
Security
2 findings — 2 medium severity. This skill can be installed but you should review these findings before use.
W011: Third-party content exposure detected (indirect prompt injection risk)
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests arbitrary public website content via Firecrawl endpoints (scrapeUrl, crawlUrl, mapUrl, batchScrapeUrls) as shown in src/firecrawl/service.ts and used by src/pipeline/intelligent-scrape.ts and crawl-pipeline.ts, and that untrusted page content is parsed and used to drive processing, deduplication, scraping decisions, and RAG ingestion—creating a clear path for indirect prompt injection.
W012: Unverifiable external dependency detected (runtime URL that controls agent)
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
Potentially malicious external URL detected (high risk: 0.80). The skill explicitly scrapes arbitrary external sites at runtime (e.g., the example URL https://docs.example.com) using firecrawl.scrapeUrl/crawlUrl and then feeds the fetched markdown/chunks into a RAG/vector-store workflow, so remote page content can directly become model context and therefore control prompts.
- Commit
3022dd3
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.