Skip to content
skillsafebeta
← Report library
Purpose / Browser automation

Firecrawl Demo Walkthrough Skill Security Audit

What the author says it does (original text)

Walk through a product's key flows with Firecrawl browser and produce a structured UX/product walkthrough. Use for signup, onboarding, pricing, docs, dashboard, product demo prep, UX teardown, and first-run experience analysis.

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Protected pages and credentials may be exposed to the hosted browser and parallel workers

Source references: 5
What we found

The Skill may ask for credentials for protected areas and uses hosted Firecrawl requests to browse, snapshot, or scrape pages. If the user authorizes login, real credentials and authenticated page content may be processed by a third party; parallel execution can widen the set of workers receiving that material.

Why this matters

Account login details, dashboard data, customer information, internal documents, or private page URLs could leave the user's local environment and enter Firecrawl's processing, logging, or output path.

What this evidence establishes

The Skill requires a Firecrawl API key for hosted requests and instructs browsing, snapshots, and scraping, so page content reached during a run may be processed by Firecrawl. However, the claimed exposure of real login credentials is not clearly supported: it only suggests asking about “credentials/constraints” when blocked and expressly prohibits submitting real credentials unless the user explicitly authorizes it and has permission. Parallel execution is optional, with no instruction to share credentials or protected content with workers. A user can ask where login state, snapshots, and the API key are sent or retained, and restrict runs to public pages and one executor.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:11In the instructionsOpen original file
inputs:  - name: FIRECRAWL_API_KEY    description: Firecrawl API key for hosted Firecrawl requests.    required: true---
Show 4 other places
SKILL.md:24In the instructionsOpen original file
Ask at most 1-3 concise questions only if blocked, such as the URL, desired flow focus, or credentials/constraints for protected areas.
SKILL.md:28In the instructionsOpen original file
Use Firecrawl browser to open the product and navigate key flows. Snapshot at each step, scrape pages when useful, and document what the user sees and can do.Do not submit real credentials, purchases, or irreversible actions unless the user explicitly instructs and has permission.
SKILL.md:34In the instructionsOpen original file
If appropriate, use sub-agents or equivalent parallel task runners:- Homepage and Marketing- Signup and Onboarding- Pricing and Plans- Docs and Developer Experience- Dashboard and Core Product- Help and SupportEach walker should return screens visited, actions taken, observations, friction, and source URLs.
SKILL.md:32In the instructionsOpen original file
## Parallel WorkIf appropriate, use sub-agents or equivalent parallel task runners:
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

5 instruction sections

The Skill uses Firecrawl's hosted browser to open the target product, navigate key flows, and create snapshots or scrape pages, so target-page content is processed by the Firecrawl service.

View source
SKILL.md:11In the instructionsOpen original file
inputs:  - name: FIRECRAWL_API_KEY    description: Firecrawl API key for hosted Firecrawl requests.    required: true---
SKILL.md:28In the instructionsOpen original file
Use Firecrawl browser to open the product and navigate key flows. Snapshot at each step, scrape pages when useful, and document what the user sees and can do.

The workflow can cover signup, pricing, documentation, dashboards, and other areas, and may assign them to parallel workers; each worker returns visited screens, actions, observations, and source URLs.

View source
SKILL.md:32In the instructionsOpen original file
## Parallel WorkIf appropriate, use sub-agents or equivalent parallel task runners:- Homepage and Marketing- Signup and Onboarding- Pricing and Plans- Docs and Developer Experience- Dashboard and Core Product- Help and SupportEach walker should return screens visited, actions taken, observations, friction, and source URLs.

The Skill explicitly limits real credentials, purchases, and irreversible actions: they must not be submitted unless the user explicitly instructs it and has permission.

View source
SKILL.md:30In the instructionsOpen original file
Do not submit real credentials, purchases, or irreversible actions unless the user explicitly instructs and has permission.
Start here · InstructionsSKILL.md
firecrawl-demo-walkthrough
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Connect to websites
SKILL.md:8In the instructionsOpen original file
  version: "0.1.0"  homepage: https://www.firecrawl.dev  source: https://github.com/firecrawl/firecrawl-workflows
SKILL.md:9In the instructionsOpen original file
  homepage: https://www.firecrawl.dev  source: https://github.com/firecrawl/firecrawl-workflowsinputs:
SKILL.md:12In the instructionsOpen original file
  - name: FIRECRAWL_API_KEY    description: Firecrawl API key for hosted Firecrawl requests.    required: true
Read keys or account settings
SKILL.md:11In the instructionsOpen original file
inputs:  - name: FIRECRAWL_API_KEY    description: Firecrawl API key for hosted Firecrawl requests.
SKILL.md:24In the instructionsOpen original file
Ask at most 1-3 concise questions only if blocked, such as the URL, desired flow focus, or credentials/constraints for protected areas.
SKILL.md:30In the instructionsOpen original file
Do not submit real credentials, purchases, or irreversible actions unless the user explicitly instructs and has permission.
Lines read
78
File checksum (to compare versions)
6b319210f122b3a25877939a6b4bb95184f6da056493e8e5dede5e9225ef9b59