Skip to content
skillsafebeta
← Report library
Purpose / Browser automation

Firecrawl Lead Gen Skill Security Audit

What the author says it does (original text)

Generate structured lead lists from prospect databases and web directories with Firecrawl browser. Use for finding prospects by role, company type, industry, stage, location, technologies, or other criteria and exporting CRM-ready JSON or CSV.

Independent security check

Security risks found

Files checked
1
Risks found
2
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

The Skill can bulk-collect and export personal contact details

Source references: 5
What we found

The instructions permit collection of names, locations, email addresses, phone numbers, LinkedIn details, and profile URLs, with portable JSON, CSV, or Markdown output. Even when visible on a site, the combined fields form an identifiable marketing dataset.

Why this matters

The resulting file could be shared, loaded into a CRM, or used for outreach people did not expect. This creates privacy, harassment, and compliance risk and may breach rules governing personal-data use or the source site.

The skill is expressly designed to build and export lead lists containing names, roles, locations, email addresses, phone numbers, LinkedIn identities, and profile URLs. Even when visible or authorized, combining these fields at scale into portable JSON/CSV creates a personal marketing dataset that can enable profiling or unwanted contact. The visible/allowed-data and no-access-bypass limits reduce but do not remove that risk. A user can require limits on fields, volume, purpose, and retention.

SKILL.md:34In the instructionsOpen original file
Capture visible or legitimately accessible fields:- name- title- company- company URL- location- email, phone, and LinkedIn only when visible/allowed- industry, company size, funding stage- notes and profile URL
Show 4 other places
SKILL.md:53In the instructionsOpen original file
## Leads[Table or link to JSON/CSV]
SKILL.md:64In the instructionsOpen original file
max_leads: [number]output: [json/csv/markdown]```
SKILL.md:3In the instructionsOpen original file
name: firecrawl-lead-gendescription: Generate structured lead lists from prospect databases and web directories with Firecrawl browser. Use for finding prospects by role, company type, industry, stage, location, technologies, or other criteria and exporting CRM-ready JSON or CSV.license: ISC
SKILL.md:69In the instructionsOpen original file
- Only extract publicly visible or legitimately accessible data.- Note masked, unavailable, or paywalled fields.- Deduplicate leads.- Do not bypass CAPTCHAs or access controls.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.Risks found: 1
Medium risk

It may act in logged-in prospect databases without a clear authorization checkpoint

Source references: 4
What we found

The Skill says to proceed immediately when the target seems clear and includes databases requiring login. Source or authorization questions are only suggested when blocked. Although bypassing access controls is forbidden, explicit confirmation of the account, permitted dataset, and site terms is not required before using an existing session.

Why this matters

If the agent can access a logged-in database, it could search, paginate, and extract records without record-by-record confirmation, consuming account credits, triggering security controls, or exceeding subscription and organizational authorization.

The instructions include databases requiring login and say to proceed immediately when the target is clear; source or authorization is only a suggested question when blocked. An agent could therefore use an existing user session without first confirming the specific account, permitted dataset, or site terms. The ban on bypassing controls and the “legitimately accessible” condition are meaningful safeguards, but legitimacy is undefined and no mandatory session-authorization check is stated. Users can require explicit confirmation of each logged-in source and scope.

SKILL.md:22In the instructionsOpen original file
Infer the prospect target, source, lead count, and output format from context. If the target is clear, proceed immediately.Ask at most 1-3 concise questions only if blocked, such as the prospect definition, source/auth requirement, or target lead count.
Show 3 other places
SKILL.md:28In the instructionsOpen original file
Use Firecrawl browser for databases requiring filters, search forms, pagination, or login. Use search/scrape for public sources.
SKILL.md:72In the instructionsOpen original file
- Deduplicate leads.- Do not bypass CAPTCHAs or access controls.
SKILL.md:69In the instructionsOpen original file
- Only extract publicly visible or legitimately accessible data.- Note masked, unavailable, or paywalled fields.- Deduplicate leads.- Do not bypass CAPTCHAs or access controls.
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

5 instruction sections

The Skill collects prospect information from public sources or databases involving filters, pagination, or login, then produces JSON, CSV, or Markdown lead lists.

View source
SKILL.md:28In the instructionsOpen original file
Use Firecrawl browser for databases requiring filters, search forms, pagination, or login. Use search/scrape for public sources.
SKILL.md:53In the instructionsOpen original file
## Leads[Table or link to JSON/CSV]
SKILL.md:64In the instructionsOpen original file
max_leads: [number]output: [json/csv/markdown]```

Collection can include names, roles, companies, locations, and visible or permitted email, phone, and LinkedIn details. The Skill calls for deduplication and disclosure of masked, unavailable, or paywalled fields.

View source
SKILL.md:34In the instructionsOpen original file
Capture visible or legitimately accessible fields:- name- title- company- company URL- location- email, phone, and LinkedIn only when visible/allowed- industry, company size, funding stage- notes and profile URL
SKILL.md:69In the instructionsOpen original file
- Only extract publicly visible or legitimately accessible data.- Note masked, unavailable, or paywalled fields.- Deduplicate leads.- Do not bypass CAPTCHAs or access controls.

Hosted Firecrawl requests require the user to supply a Firecrawl API key. No script is provided, so the key's exact handling, storage, and transmission are not visible.

View source
SKILL.md:10In the instructionsOpen original file
  source: https://github.com/firecrawl/firecrawl-workflowsinputs:  - name: FIRECRAWL_API_KEY    description: Firecrawl API key for hosted Firecrawl requests.    required: true---
Start here · InstructionsSKILL.md
firecrawl-lead-gen
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Connect to websites
SKILL.md:8In the instructionsOpen original file
  version: "0.1.0"  homepage: https://www.firecrawl.dev  source: https://github.com/firecrawl/firecrawl-workflows
SKILL.md:9In the instructionsOpen original file
  homepage: https://www.firecrawl.dev  source: https://github.com/firecrawl/firecrawl-workflowsinputs:
SKILL.md:12In the instructionsOpen original file
  - name: FIRECRAWL_API_KEY    description: Firecrawl API key for hosted Firecrawl requests.    required: true
Read keys or account settings
SKILL.md:11In the instructionsOpen original file
inputs:  - name: FIRECRAWL_API_KEY    description: Firecrawl API key for hosted Firecrawl requests.
Lines read
73
File checksum (to compare versions)
42c119e1f875ec9e2724df58c696d643de7fc1b1a8512b8791fee090dd57bea9