firecrawl-search-5af027 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited firecrawl-search-5af027 (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use Firecrawl as a CLI-backed web_search provider when ArkSpace routes search to Firecrawl or when the user explicitly asks for Firecrawl search.
Firecrawl configuration is managed by provider-manager; do not ask the user to edit config files by hand.
https://github.com/firecrawl/clihttps://docs.firecrawl.dev/quickstarts/openclawhttps://docs.openclaw.ai/tools/firecrawlResolve the installed ArkSpace package root before running commands. Replace <installed-arkspace-path> with the directory two levels above this loaded SKILL.md, such as /Users/<user>/.claude/plugins/cache/ark-space/ark-space/0.1.2. Use the installed package path, not a repository-relative command.
Check configuration:
python3 <installed-arkspace-path>/scripts/arkspace.py provider check firecrawl --capability web_searchSet up Firecrawl once:
python3 <installed-arkspace-path>/scripts/arkspace.py provider setup firecrawl --wizardFor multiple API keys:
python3 <installed-arkspace-path>/scripts/arkspace.py provider setup firecrawl --wizard --key-count 2The Firecrawl CLI must also be available as firecrawl, or npx must be available for the helper fallback.
If the provider check reports a missing Firecrawl API key:
python3 <installed-arkspace-path>/scripts/arkspace.py provider setup firecrawl --wizard.--wizard through that tool.! python3 <installed-arkspace-path>/scripts/arkspace.py provider setup firecrawl --wizard in the Claude prompt or terminal, orpython3 <installed-arkspace-path>/scripts/arkspace.py provider setup firecrawl --save-secret FIRECRAWL_API_KEY --secret-stdin./ark-space:firecrawl-search <query>.Basic search:
python3 <installed-arkspace-path>/scripts/arkspace.py web search --provider firecrawl "agent skills" --output jsonSearch and scrape result pages:
python3 <installed-arkspace-path>/scripts/arkspace.py web search --provider firecrawl "OpenClaw documentation" \
--include-text \
--max-results 5 \
--output jsonregistry/search-providers.yaml before execution.firecrawl-scrape when the user provides a URL.firecrawl-map or firecrawl-crawl for known-site URL discovery or bulk extraction.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.