Firecrawl Map Skill Security Audit

The Skill explicitly requires authentication and directs Firecrawl to map a user-supplied site; with `--search`, it also processes the search term. Thus, when executed, the target URL and query enter Firecrawl's service workflow. Internal hostnames, private paths, or sensitive queries could reveal organizational information to a third party. Users can restrict use to public sites, avoid sensitive terms, and ask about Firecrawl's retention and access policies. This supports a potential risk, not proof that any data was sent.

This is not an installation command; it is a tool permission allowing `npx firecrawl-cli`. The actual examples invoke an existing `firecrawl` command. Although npx could fetch an unpinned package if that alternative entry point were used, the provided instructions never require it, so the candidate does not establish that the Skill installs an unpinned dependency. A user can still ask the author to pin the permitted CLI version or disallow the npx entry point.