Skills/npm/firecrawl-mcp

firecrawl-mcp@3.34.1

CAUTION

Publisher claims: "Firecrawl MCP server, the context API for AI agents: search, scrape, parse, crawl, map, and interact with the web, run Agent and Monitor jobs, and search scientific papers (PubMed, bioRxiv, medRxiv, arXiv). Works with Firecrawl cloud or a self-hosted inst" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher firecrawl · joined 0 days agoInstalls 626KLast detonated 2 h ago
Dispute verdict

Behavior trace

Honeypot run · 3 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
2.8sprocessdependency install exit 1
3.0sprocessexec /usr/bin/timeout
3.0sprocessexited 1: Node.js v22.23.4
3.0sclaimedno tools/list reply (exit 1)
3.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsREADME.md:1218 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/index.js:1992 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/index.js:1990 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/index.js:1993 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/index.js:1991 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:140 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:171 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
URL using raw IP addressREADME.md:1235 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
npx invocation of non-well-known packageREADME.md:93 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addressREADME.md:1235 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathsdist/server.js:1986 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/server.js:1988 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/index.js:1994 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:77 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
npx invocation of non-well-known packageREADME.md:142 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Access to sensitive file pathsdist/server.js:1987 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/server.js:1989 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/server.js:1985 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:96 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:30 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
File type combined with upload actionREADME.md:1351 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiondist/index.js:2568 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)dist/server.d.ts:476 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
File type combined with upload actiondist/server.js:2563 · File type combined with upload action — agent may exfiltrate local data files
AST07