Is firecrawl-build-onboarding safe to install?

SaferSkills independently audited firecrawl-build-onboarding (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/firecrawl-build-onboarding/SKILL.md · 1 file

skills/firecrawl-build-onboarding/SKILL.md4.5 KB · Markdown

name: firecrawl-build-onboarding

description: Get Firecrawl credentials and SDK setup into a project. Use when an application needs `FIRECRAWL_API_KEY`, when an agent should add Firecrawl to `.env`, when the user wants to authenticate Firecrawl for app code, or when choosing the first SDK and docs for a new Firecrawl integration. This skill includes its own browser auth flow, so it does not depend on the website onboarding skill.

license: ISC

metadata:

author: firecrawl

version: "0.1.0"

homepage: https://www.firecrawl.dev

source: https://github.com/firecrawl/skills

inputs:

- name: FIRECRAWL_API_KEY

description: Firecrawl API key used for hosted Firecrawl API requests.

required: true

- name: FIRECRAWL_API_URL

description: Optional base URL for self-hosted Firecrawl deployments.

required: false

references:

- references/auth-flow.md

- references/sdk-installation.md

- references/project-setup.md

Firecrawl Build Onboarding

Use this skill for the application-integration path from Firecrawl's onboarding flow.

Install

If you haven't installed yet, one command sets up both the CLI tools (for live web work) and the build skills (for app integration):

npx -y firecrawl-cli@latest init --all --browser

This installs the Firecrawl CLI, the CLI skills, and these build skills together. It also opens browser auth so the human can sign in or create an account. No separate npx skills add step is needed.

Use This When

a project needs FIRECRAWL_API_KEY
the user wants Firecrawl wired into .env
you are adding Firecrawl to an app for the first time
you need to choose the first SDK or REST path

If the human still needs to sign up, sign in, or authorize access in the browser, use the auth flow reference in this skill.

Quick Start

If the user already has an API key, place it in .env:

FIRECRAWL_API_KEY=fc-...

If the project is self-hosted, also set:

FIRECRAWL_API_URL=https://your-firecrawl-instance.example.com

Then decide which integration path applies:

Fresh project -> choose the target stack, install the SDK, add the first Firecrawl call, and run a smoke test
Existing project -> inspect the repo first, then integrate Firecrawl where the project already handles third-party APIs and env vars

What Do You Need?

Task	Reference
Run the browser auth flow and save `FIRECRAWL_API_KEY`	references/auth-flow.md
Install the right SDK	references/sdk-installation.md
Put credentials into `.env` or project config	references/project-setup.md
Choose the right endpoint after setup	firecrawl-build
Need live web tooling during this task	The CLI skills are already installed from the same command
Start implementation from a known URL	firecrawl-build-scrape
Start implementation from a query	firecrawl-build-search

Docs (Source of Truth)

Read the source-of-truth page for your project language for SDK usage, schemas, and examples:

Node / TypeScript: docs.firecrawl.dev/agent-source-of-truth/node
Python: docs.firecrawl.dev/agent-source-of-truth/python
Rust: docs.firecrawl.dev/agent-source-of-truth/rust
Java: docs.firecrawl.dev/agent-source-of-truth/java
Elixir: docs.firecrawl.dev/agent-source-of-truth/elixir
cURL / REST: docs.firecrawl.dev/agent-source-of-truth/curl

After Setup

Once the key is present:

decide whether this is a fresh project or an existing codebase
ask what Firecrawl should do in the product
pick the narrowest endpoint that matches that behavior
read the source-of-truth page for the project language before writing code
add the SDK or REST call in code
run a smoke test that proves one real Firecrawl request succeeds
use the endpoint-specific skills in this repo for implementation guidance
if you also need live web tooling during the current task, the CLI skills are already installed — use firecrawl/cli

firecrawl-build-onboarding— agent skill

Is firecrawl-build-onboarding safe to install?

Firecrawl Build Onboarding

Install

Use This When

Quick Start

What Do You Need?

Docs (Source of Truth)

After Setup

Audit the pieces. Scan the whole. Decide.