📦
firecrawl-build-scrape
82Build Firecrawl Single-Page Scraping
Apps often need clean content from one known URL. This skill guides a focused Firecrawl /scrape integration for page extraction.
Coding & Development View
Skills firecrawl-map
📦
firecrawl-map
Content revision r1 High Risk ⚙️ External commands🌐 Network access📁 Filesystem access
Map Website URLs with Firecrawl
Large websites can make the right page hard to find. This skill maps URLs with Firecrawl and filters results by search terms.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "firecrawl-map" from https://skillstore.io/skills/firecrawl-firecrawl-map.md and its manifest at https://skillstore.io/api/skills/firecrawl-firecrawl-map/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "firecrawl-map". Find authentication documentation on a developer docs site.
Expected outcome:
The strongest match is the API authentication guide. Related results include OAuth setup, token reference, and account security pages.
Using "firecrawl-map". Map a public marketing website before a content audit.
Expected outcome:
The map found homepage, pricing, blog, documentation, support, and legal pages. The documentation section has the deepest URL set.
Using "firecrawl-map". Find pages about billing on a help center.
Expected outcome:
Relevant matches include billing overview, invoice downloads, payment methods, subscription changes, and refund policy pages.
Security Audit
High Riskv4 • 7/5/2026 Open versioned report
The static backtick, hardcoded URL, and path traversal findings are false positives caused by Markdown examples, inline option names, and relative documentation links. The main residual risks come from the allowed npx Firecrawl command, arbitrary website mapping, and user-controlled output files.
1
Files scanned
51
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (3)
High
Unpinned npx Command Execution
The allowed tools include Bash(npx firecrawl *), which can execute package-manager managed code without a version pin. A compromised or unexpected package resolution could run unreviewed code.
The allowed-tools block explicitly permits npx firecrawl with wildcard arguments. npx execution is a known supply-chain risk when package identity and version are not pinned.
Medium
Arbitrary Site Mapping Capability
The skill instructs agents to map user-provided websites and can include subdomains. Without approval boundaries, it could enumerate private, internal, or unauthorized sites reachable from the runtime.
The quick-start examples and options show mapping arbitrary URLs and expanding scope to subdomains. This is intended behavior, but it needs user authorization controls.
Medium
User-Controlled Output Path
The documented output option accepts a path and the examples write results to disk. Without guardrails, a user-supplied path could overwrite workspace files.
The file output option is documented and used in examples. The SKILL.md does not define path restrictions or overwrite safeguards.
Risk Factors
⚙️ External commands (11)
🌐 Network access (1)
📁 Filesystem access (3)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/firecrawl-firecrawl-map/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/firecrawl-firecrawl-map?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/firecrawl-firecrawl-map?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/firecrawl-firecrawl-map/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/firecrawl-firecrawl-map.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
firecrawl. (2026). firecrawl-map security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/firecrawl-firecrawl-map/audits/4BibTeX citation
@techreport{firecrawl-firecrawl-firecrawl-map-2026,
author = {firecrawl},
title = {firecrawl-map security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/firecrawl-firecrawl-map/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "firecrawl-map security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "firecrawl"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/firecrawl-firecrawl-map/audits/4"
identifiers:
- type: other
value: "skillstore:firecrawl-firecrawl-map:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
85
Content
68
Community
83
Spec Compliance
What You Can Build
Find Documentation Pages
Locate relevant pages on a large documentation site before reading or scraping them.
Audit Site Coverage
Build a URL list for a public website before planning crawl scope or content review.
Prepare Content Migration
Collect key URLs from an existing site before deciding which pages need export or review.
Try These Prompts
Find a Specific Page
Use firecrawl-map to find pages about authentication on the target documentation site. Return the most relevant URLs first.
List Main Site URLs
Map this public website and return up to 200 discovered URLs. Group obvious documentation, pricing, and support pages.
Search and Prepare Scrape Targets
Map the site for pages related to API keys. Identify the best pages to scrape next and explain why each page matters.
Map With Scope Controls
Map the approved domain only, include subdomains if they match the same organization, limit results to 500 URLs, and save the list under .firecrawl.
Best Practices
- Confirm the target domain before mapping.
- Use search terms to reduce noise on large sites.
- Save outputs inside a dedicated .firecrawl directory.
Avoid
- Do not map domains without user authorization.
- Do not use broad subdomain mapping unless scope is clear.
- Do not save output over important project files.
Frequently Asked Questions
What does this skill do?
It uses Firecrawl to discover URLs on a website and optionally filter them by a search query.
Does it scrape page content?
No. It finds URLs. Use a scrape or crawl skill after selecting target pages.
Can it search within a large site?
Yes. Provide a search term so Firecrawl returns URLs that match the topic.
Can it include subdomains?
Yes, when subdomain inclusion is explicitly requested and within the approved scope.
Where are results saved?
The skill can save results to a chosen output path. A dedicated .firecrawl directory is safest.
What setup is required?
The agent environment needs access to Firecrawl CLI or an approved npx Firecrawl command.
Developer Details
Author
firecrawlLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
30c73eac2afe762f6aa9c4553158769369d47351
Maintenance freshness
7/18/2026
Usage
5 downloads · 95 views
File structure
📄 SKILL.md
More from firecrawl
View all📦
firecrawl-build-interact
82Build Firecrawl Browser Interactions
Dynamic pages often hide data behind clicks, forms, and login flows. This skill helps teams choose and scope Firecrawl /interact integrations.
Coding & Development View
📦
firecrawl-build-search
81Build Firecrawl Search Workflows
Teams need reliable source discovery before scraping or answering questions. This skill guides Firecrawl search integration, result selection, and follow-up extraction decisions.
Coding & Development View
📦
firecrawl-search
78Search the Web with Firecrawl
Current web research often needs more than short search snippets. This skill runs Firecrawl searches, saves structured results, and can extract full page content for review.
Research & Learning View
📦
firecrawl-crawl
78Crawl Websites with Firecrawl
Teams need reliable content from many pages without manual copying. This skill guides Firecrawl crawls with scoped paths, limits, progress, and saved results.
Data & Analytics View
📦
firecrawl-scrape
77Scrape Web Pages Into Clean Markdown
Web pages can be hard to extract cleanly when scripts render important content. This skill uses Firecrawl to scrape URLs into LLM-ready markdown and optional formats.
Research & Learning View
Related Skills
View all📦
sitemapkit
78Discover Website URLs with SitemapKit
by 0nl1n1n
Website page inventories are difficult to build from nested sitemaps. SitemapKit discovers sitemap files and extracts deduplicated URLs through three focused MCP tools.
Research & Learning View
📦
firecrawl-scraper
78Extract Web Content with Firecrawl
by sickn33
Manual extraction from complex websites is slow and inconsistent. This skill guides Firecrawl-based scraping, crawling, screenshots, and PDF parsing.
Research & Learning View
📦
web-research
78Research the Web with Structured Subagents
by langchain-ai
Complex web research can become scattered and hard to verify. This skill plans subtopics, delegates searches, and synthesizes cited findings into a clear answer.
Research & Learning View
📦
exa-search
78Search the Web Semantically with Exa
by sickn33
Keyword searches can miss conceptually relevant sources and related content. This skill guides Exa API searches for semantic discovery, category filtering, and structured research.
Research & Learning View
📦
search-specialist
77Find Reliable Sources Faster
by sickn33
Research tasks often produce scattered results and unclear source quality. This skill guides Claude, Codex, and Claude Code through structured searches, verification, and synthesis.
Research & Learning View
📦
exa-research
75Research Web and Code Sources with Exa
by Calel33
Technical research can become fragmented across articles, documentation, and repositories. This skill combines Exa web and code searches into structured, repeatable workflows.
Research & Learning View