Versioned security assessment

Report ID: SA-283D7DDB

6/30/2026, 12:30:26 AM

firecrawl-map security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
firecrawl-map
Version
v2
Maintainer
firecrawl
Source
github.com/firecrawl/cli/tree/main/skills/firecrawl-map/
Coverage
1 Files scanned · 51 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

The static analyzer reported 19 issues, but most are false positives from Markdown backticks, example text, relative documentation links, and the word Description. The skill does intentionally allow Firecrawl CLI commands that can access websites and write output files, so it carries medium operational risk. No evidence found of prompt injection, malicious intent, credential theft, or hidden data exfiltration.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 51 Lines analyzed

2 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 3 evidence locations

Filesystem access

May read or write local files.

Observed in 3 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 3 evidence locations

Capability review items (2)
Medium
SKILL.md:6-7SKILL.md:22-28
Network-Capable External CLI Use
The skill allows Bash execution for firecrawl and npx firecrawl commands, and its examples run map commands against user-supplied URLs. This is legitimate for a website mapping skill, but it can make outbound network requests and write local output files.
The allowed-tools block and command examples directly confirm external CLI execution with network-facing URL arguments. I found no evidence of malicious targets, secret collection, or hidden exfiltration.
Low
SKILL.md:44
Example URL Is Not Evidence of Exfiltration
The hardcoded URL finding points to docs.example.com in an illustrative tip. It is an example domain used to explain workflow, not a suspicious receiver for user data.
The URL appears in explanatory text next to sample map and scrape usage. No evidence found that data is sent to an attacker-controlled endpoint.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (3)
Low
SKILL.md:12SKILL.md:22-28SKILL.md:34-44
Markdown Backticks Misclassified as Command Execution
The static Ruby or shell backtick detections occur in Markdown inline code, a fenced bash example, an options table, and usage tips. These are documentation examples, not executable Ruby backtick calls inside a program file.
The affected lines are clearly Markdown documentation and not source code that will execute automatically. The skill still documents commands, but these scanner hits are not Ruby backtick execution.
Low
SKILL.md:48-50
Relative Documentation Links Misclassified as Path Traversal
The path traversal findings are relative Markdown links to neighboring Firecrawl skill documentation. They do not read files, write files, or pass untrusted paths to a command.
The sequences appear only in Markdown links under See also. There is no runtime filesystem operation connected to these relative paths.
Low
SKILL.md:3SKILL.md:32
Weak Crypto Detection Is a Text Match False Positive
The weak cryptographic algorithm findings point to prose and table text, including the word Description. No hashing, encryption, or cryptographic API usage appears in the reviewed skill file.
The cited lines contain metadata and a Markdown table header, not cryptographic logic. No evidence found of MD5, DES, SHA1, or other weak algorithm usage.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable