Skip to content
skillsafebeta
← Report library
Purpose / Browser automation

Firecrawl Shop Skill Security Audit

What the author says it does (original text)

Research products across the web with Firecrawl and produce a shopping recommendation or cart-ready summary. Use when the user wants to compare products, find the best option, evaluate reviews, respect budget/preferences, or shop with a saved browser session.

Independent security check

Security risks found

Files checked
1
Risks found
2
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Low risk

Product queries and preferences are processed by hosted Firecrawl services

Source references: 3
What we found

The Skill explicitly requires an API key for hosted requests and directs Firecrawl to search and scrape material related to the product, budget, preferences, and selected sites. The supplied source does not describe the hosted service's retention, logging, or secondary-use practices.

Why this matters

Shopping intent, budget, preferences, and target sites may be processed by a third party. Names, addresses, order details, or other sensitive content included in a query could also be disclosed with the request.

The Skill requires an API key for hosted Firecrawl requests and directs the agent to use Firecrawl to search and scrape product pages, reviews, and prices. When those requests run, the product request and any budget, preferences, or named sites expressed for the search may be sent to Firecrawl. The source gives no logging, retention, or secondary-use terms for the hosted service. This supports a privacy risk, but not a claim that data was misused. A user can request the service's data policy or avoid sensitive preferences.

SKILL.md:10In the instructionsOpen original file
  source: https://github.com/firecrawl/firecrawl-workflowsinputs:  - name: FIRECRAWL_API_KEY    description: Firecrawl API key for hosted Firecrawl requests.    required: true---
Show 2 other places
SKILL.md:22In the instructionsOpen original file
Infer the product, budget, preferences, sites, and desired stopping point from context. If the product is clear, proceed immediately.Ask at most 1-3 concise questions only if blocked, such as the product, hard budget/preferences, or whether cart actions are allowed.
SKILL.md:28In the instructionsOpen original file
Use Firecrawl search and scrape to compare reviews, product pages, specifications, pricing, Reddit/forums, and trusted review sites. Use Firecrawl browser for shopping-site navigation and cart actions when authorized.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.Risks found: 1
Medium risk

Broad cart authorization lets the agent choose the product and seller and alter an account cart

Source references: 3
What we found

The process tells the agent to select the “best” option and then add it whenever the user has requested cart actions. It does not require a fresh confirmation of the exact model, seller, live price, quantity, or delivery terms before changing the cart.

Why this matters

The account cart could receive the wrong model, a third-party seller's listing, or an item whose price has changed. Although checkout without explicit approval is prohibited, the cart, inventory holds, promotion eligibility, or later purchasing decisions may still be affected.

Cart modification has two explicit safeguards: the user must request it and an authenticated browser profile must be available; the process also stops before checkout. Even so, the agent first selects the “best” option and then adds it. The source does not require renewed confirmation of the exact model, seller, quantity, live price, or shipping terms before changing the account's cart, so broad authorization could add an unintended item or offer. Users can limit authorization to a specific SKU, seller, quantity, and maximum delivered price.

SKILL.md:18In the instructionsOpen original file
Use this to research products and recommend a purchase option. Only add items to a cart when the user explicitly asks and has an authenticated browser profile available.
Show 2 other places
SKILL.md:32In the instructionsOpen original file
1. Research product options across multiple sources.2. Compare price, specs, reviews, seller quality, shipping, and fit to preferences.3. Pick the best option and explain why.4. If the user asked for cart actions, open the shopping site in browser, add the item, and stop before checkout unless explicitly instructed.
SKILL.md:66In the instructionsOpen original file
- Be specific with model numbers, prices, and sellers.- Do not purchase or check out without explicit approval.- Note affiliate, sponsored, or unreliable sources when visible.

Inside this skill

5 instruction sections

The Skill uses Firecrawl to search and scrape product pages, reviews, forums, prices, and specifications, then compares candidates and recommends an option.

View source
SKILL.md:28In the instructionsOpen original file
Use Firecrawl search and scrape to compare reviews, product pages, specifications, pricing, Reddit/forums, and trusted review sites. Use Firecrawl browser for shopping-site navigation and cart actions when authorized.
SKILL.md:32In the instructionsOpen original file
1. Research product options across multiple sources.2. Compare price, specs, reviews, seller quality, shipping, and fit to preferences.3. Pick the best option and explain why.4. If the user asked for cart actions, open the shopping site in browser, add the item, and stop before checkout unless explicitly instructed.

The Skill requires a Firecrawl API key for requests to Firecrawl's hosted service.

View source
SKILL.md:10In the instructionsOpen original file
  source: https://github.com/firecrawl/firecrawl-workflowsinputs:  - name: FIRECRAWL_API_KEY    description: Firecrawl API key for hosted Firecrawl requests.    required: true---

When explicitly requested and an authenticated browser profile is available, the Skill may add the selected product to a cart; by default it stops before checkout.

View source
SKILL.md:18In the instructionsOpen original file
Use this to research products and recommend a purchase option. Only add items to a cart when the user explicitly asks and has an authenticated browser profile available.
SKILL.md:35In the instructionsOpen original file
3. Pick the best option and explain why.4. If the user asked for cart actions, open the shopping site in browser, add the item, and stop before checkout unless explicitly instructed.
SKILL.md:67In the instructionsOpen original file
- Be specific with model numbers, prices, and sellers.- Do not purchase or check out without explicit approval.- Note affiliate, sponsored, or unreliable sources when visible.
Start here · InstructionsSKILL.md
firecrawl-shop
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Connect to websites
SKILL.md:8In the instructionsOpen original file
  version: "0.1.0"  homepage: https://www.firecrawl.dev  source: https://github.com/firecrawl/firecrawl-workflows
SKILL.md:9In the instructionsOpen original file
  homepage: https://www.firecrawl.dev  source: https://github.com/firecrawl/firecrawl-workflowsinputs:
SKILL.md:12In the instructionsOpen original file
  - name: FIRECRAWL_API_KEY    description: Firecrawl API key for hosted Firecrawl requests.    required: true
Read keys or account settings
SKILL.md:11In the instructionsOpen original file
inputs:  - name: FIRECRAWL_API_KEY    description: Firecrawl API key for hosted Firecrawl requests.
Lines read
69
File checksum (to compare versions)
1225028ce966caabae6f08ab2a1c186bee3bba8fd755ebc5d522c4ece5f64a43