·
Last changedVersion:
This version passed the hardening gate. Hardening applied 7 targeted changes and preserved all other text. Classified findings before hardening: 1. Classified findings closed: 1. Classified findings remaining: 0. Unclassified scanner findings remaining: 0. Review findings closed: 9. Review findings remaining: 0.
1
None
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Supply Chain & Install-Time Trust | — | Medium | Closed |
1 finding
Bulk extract content from a website. Crawls pages following links up to a depth/limit.
Prerequisite: crawl requires authentication (no keyless free tier); without credentials the CLI prompts an interactive login. Leave that login to the user: if credentials are missing, stop and ask the user to sign in outside this session. Keep API keys out of command arguments and chat messages.
Run firecrawl crawl --help for the full option list.
Done when: the crawl reaches a terminal status and the saved output under .firecrawl/ contains the expected pages.
--include-paths whenever the user names a section, and confirm scope with the user before any crawl that leaves it out.--limit and --timeout on every crawl.-o output as a relative path inside the .firecrawl/ folder, with no parent directory segments, and write only inside that folder. Keep that folder out of version control.firecrawl crawl and firecrawl credit-usage, and wrap every URL and job ID argument in double quotes.--wait when you need the results immediately. It has no default timeout; always pair it with --timeout <seconds> to bound polling. Without --wait, crawl returns a job ID for async polling.--include-paths whenever the request names a section — crawl only the pages you need.firecrawl credit-usage and get the user's confirmation before large crawls (credit-usage requires authentication).Get started with chainctlchainctl skill install public/firecrawl/firecrawl-crawl:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/firecrawl/skills/firecrawl-crawl:latest
ISC
HARDENING.md
SKILL.md