registry / firecrawl-cli / 1.19.26

firecrawl-cli@1.19.26

⚠ Under review

Command-line interface for Firecrawl. Scrape, crawl, and extract data from any website directly from your terminal.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 54 file(s), 466 KB of source, external domains: api.firecrawl.dev, api.github.com, api.openai.com, example.com, firecrawl.dev, github.com, mcp.firecrawl.dev, news.ycombinator.com, registry.npmjs.org, stripe.com, www.firecrawl.dev

Source & flagged code

6 flagged

dist/utils/auth.jsView file

Lines 29-92javascript

29 return ownKeys(o);

30 };

31 return function (mod) {

32 if (mod && mod.__esModule) return mod;

33 var result = {};

34 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

35 __setModuleDefault(result, mod);

36 return result;

37 };

38})();

39Object.defineProperty(exports, "__esModule", { value: true });

40exports.printBanner = printBanner;

41exports.isAuthenticated = isAuthenticated;

42exports.ensureAuthenticated = ensureAuthenticated;

43exports.browserLogin = browserLogin;

44exports.manualLogin = manualLogin;

45exports.interactiveLogin = interactiveLogin;

46const readline = __importStar(require("readline"));

47const crypto = __importStar(require("crypto"));

48const credentials_1 = require("./credentials");

49const config_1 = require("./config");

50const DEFAULT_API_URL = 'https://api.firecrawl.dev';

51const WEB_URL = 'https://firecrawl.dev';

52const AUTH_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes

53const POLL_INTERVAL_MS = 2000; // 2 seconds

54/**

55 * Prompt for input

56 */

57function promptInput(question) {

58 const rl = readline.createInterface({

59 input: process.stdin,

60 output: process.stdout,

61 });

62 return new Promise((resolve) => {

63 rl.question(question, (answer) => {

64 rl.close();

65 resolve(answer.trim());

66 });

67 });

68}

69/**

70 * Open URL in the default browser

71 */

72async function openBrowser(url) {

73 const { exec } = await Promise.resolve().then(() => __importStar(require('child_process')));

74 const platform = process.platform;

High

Child Process

Package source references child process execution.

dist/utils/auth.jsView on unpkg · L72

75 let command;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/utils/auth.jsView on unpkg · L49

76 switch (platform) {

77 case 'darwin':

78 command = `open "${url}"`;

79 break;

80 case 'win32':

81 command = `start "" "${url}"`;

82 break;

83 default:

84 command = `xdg-open "${url}"`;

85 }

86 return new Promise((resolve, reject) => {

87 exec(command, (error) => {

88 if (error) {

89 reject(error);

90 }

91 else {

92 resolve();

dist/commands/skills-native.jsView file

Lines 1-32javascript

1"use strict";

2/**

3 * Native skill installation — replicates `npx skills add firecrawl/cli --full-depth --global --all`

4 * without requiring Node.js or npx. Used as a fallback for binary installs.

5 */

6var __importDefault = (this && this.__importDefault) || function (mod) {

7 return (mod && mod.__esModule) ? mod : { "default": mod };

8};

9Object.defineProperty(exports, "__esModule", { value: true });

10exports.detectInstalledAgentNames = detectInstalledAgentNames;

11exports.installSkillsNative = installSkillsNative;

12exports.hasNpx = hasNpx;

13const child_process_1 = require("child_process");

14const fs_1 = __importDefault(require("fs"));

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/commands/skills-native.jsView on unpkg · L12

15const path_1 = __importDefault(require("path"));

16const os_1 = __importDefault(require("os"));

17const green = '\x1b[32m';

18const dim = '\x1b[2m';

19const bold = '\x1b[1m';

20const reset = '\x1b[0m';

21const DEFAULT_REPO = 'firecrawl/cli';

22const SKILLS_SUBDIR = 'skills';

23/**

24 * Per-harness global skills directories.

25 *

26 * These MUST match the authoritative registry used by the `npx skills` tool

27 * (antfu/skills-cli, src/agents.ts) so the native fallback path (no npx) writes

28 * to the exact same place npx would. Several dirs are NOT `.<name>/skills`

29 * (windsurf, opencode, github-copilot), so relying on the synthesized fallback

30 * would install to the wrong directory. Paths are relative to HOME.

31 *

32 * openclaw/openhands/hermes-agent are Firecrawl launch targets; openclaw and

dist/commands/init.jsView file

Lines 25-65javascript

25 ownKeys = Object.getOwnPropertyNames || function (o) {

26 var ar = [];

27 for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;

28 return ar;

29 };

30 return ownKeys(o);

31 };

32 return function (mod) {

33 if (mod && mod.__esModule) return mod;

34 var result = {};

35 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

36 __setModuleDefault(result, mod);

37 return result;

38 };

39})();

40Object.defineProperty(exports, "__esModule", { value: true });

41exports.TEMPLATES = void 0;

42exports.stepAuth = stepAuth;

43exports.findTemplate = findTemplate;

44exports.scaffoldTemplate = scaffoldTemplate;

45exports.handleInitCommand = handleInitCommand;

46const child_process_1 = require("child_process");

47const auth_1 = require("../utils/auth");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/commands/init.jsView on unpkg · L45

48const credentials_1 = require("../utils/credentials");

49const config_1 = require("../utils/config");

50const skills_install_1 = require("./skills-install");

51const skills_native_1 = require("./skills-native");

52const web_defaults_1 = require("../utils/web-defaults");

53const orange = '\x1b[38;5;208m';

54const reset = '\x1b[0m';

55const dim = '\x1b[2m';

56const bold = '\x1b[1m';

57const green = '\x1b[32m';

58const TEMPLATES_REPO = 'firecrawl/cli-templates';

59exports.TEMPLATES = [

60 // Scraping

61 {

62 name: 'Scrape / Basic',

63 description: 'Simple scrape + crawl scripts',

64 path: 'scrape-basic',

65 },

Lines 144-184javascript

144 const result = await (0, skills_native_1.installSkillsNative)(repo, {

145 agent: options.agent,

146 quiet: true,

147 });

148 const suffix = ` ${dim}(${result.skillCount})${reset}`;

149 const linked = result.linkedAgents.length > 0

150 ? ` ${dim}→ ${result.linkedAgents.join(', ')}${reset}`

151 : '';

152 console.log(` ${green}✓${reset} ${label}${suffix}${linked}`);

153 return result.skillCount;

154 }

155 catch (err) {

156 console.log(` ${dim}✗${reset} ${label}`);

157 const msg = err instanceof Error ? err.message : 'Unknown error';

158 console.error(` ${dim}${msg}${reset}`);

159 // Fall through to npx if native failed and npx is available

160 if (!(0, skills_native_1.hasNpx)())

161 throw err;

162 console.log(` ${dim}Retrying with npx...${reset}`);

163 }

164 }

165 // Fallback: npx skills add (copies files, may spray to all agents)

166 if ((0, skills_native_1.hasNpx)()) {

167 const args = (0, skills_install_1.buildSkillsInstallArgs)({

168 repo,

169 agent: options.agent,

170 yes: options.yes || options.all || true,

171 global: true,

172 includeNpxYes: true,

173 });

174 const isTty = process.stdout.isTTY;

175 if (isTty) {

176 process.stdout.write(` ${dim}↓ Installing ${label}...${reset}`);

177 }

178 try {

179 const stdout = (0, child_process_1.execSync)(args.join(' '), {

180 stdio: ['ignore', 'pipe', 'pipe'],

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/commands/init.jsView on unpkg · L164

181 env: (0, skills_install_1.cleanNpmEnv)(),

182 });

183 const count = parseSkillCount(stdout?.toString() ?? '');

184 const suffix = count != null ? ` ${dim}(${count})${reset}` : '';

•matchType = previous_version_dangerous_delta matchedPackage = firecrawl-cli@1.19.24 matchedIdentity = npm:ZmlyZWNyYXdsLWNsaQ:1.19.24 similarity = 0.963 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/init.jsView on unpkg

Source & flagged code

6 flagged · loading source

dist/utils/auth.jsView file

72async function openBrowser(url) { L73: const { exec } = await Promise.resolve().then(() => __importStar(require('child_process'))); L74: const platform = process.platform;

High

Child Process

Package source references child process execution.

dist/utils/auth.jsView on unpkg · L72

49const config_1 = require("./config"); L50: const DEFAULT_API_URL = 'https://api.firecrawl.dev'; L51: const WEB_URL = 'https://firecrawl.dev'; ... L59: input: process.stdin, L60: output: process.stdout, L61: }); ... L72: async function openBrowser(url) { L73: const { exec } = await Promise.resolve().then(() => __importStar(require('child_process'))); L74: const platform = process.platform; L75: let command; ... L103: /** L104: * Generate a PKCE code verifier (random string, base64url encoded)

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/utils/auth.jsView on unpkg · L49

dist/commands/skills-native.jsView file

12exports.hasNpx = hasNpx; L13: const child_process_1 = require("child_process"); L14: const fs_1 = __importDefault(require("fs")); ... L244: function detectInstalledAgents() { L245: const home = os_1.default.homedir(); L246: return AGENTS.filter((agent) => { ... L283: function cloneRepo(tmpDir, repo) { L284: const repoUrl = `https://github.com/${repo}.git`; L285: if (hasGit()) { ... L404: if (fs_1.default.existsSync(lockFilePath)) { L405: lock = JSON.parse(fs_1.default.readFileSync(lockFilePath, 'utf-8')); L406: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/commands/skills-native.jsView on unpkg · L12

dist/commands/init.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/init.jsView on unpkg

164} L165: // Fallback: npx skills add (copies files, may spray to all agents) L166: if ((0, sk[redacted])()) { ... L178: try { L179: const stdout = (0, child_process_1.execSync)(args.join(' '), { L180: stdio: ['ignore', 'pipe', 'pipe'],

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/commands/init.jsView on unpkg · L164

45exports.handleInitCommand = handleInitCommand; L46: const child_process_1 = require("child_process"); L47: const auth_1 = require("../utils/auth"); ... L121: * inheriting it, so users see a single line per repo. Returns the number of L122: * skills installed (parsed from the captured stdout), or null if unknown. L123: * ... L175: if (isTty) { L176: process.stdout.write(` ${dim}↓ Installing ${label}...${reset}`); L177: } ... L241: * The skill count is reported once (the same skills are symlinked to each L242: * agent), so a multi-agent install does not inflate the total. L243: */

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/commands/init.jsView on unpkg · L45

Findings

1 Critical3 High4 Medium6 Low

CriticalPrevious Version Dangerous Deltadist/commands/init.js

HighChild Processdist/utils/auth.js

HighSandbox Evasion Gated Capabilitydist/utils/auth.js

HighRuntime Package Installdist/commands/init.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/commands/init.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/commands/skills-native.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/utils/auth.jsView file

Lines 29-92javascript

29 return ownKeys(o);

30 };

31 return function (mod) {

32 if (mod && mod.__esModule) return mod;

33 var result = {};

34 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

35 __setModuleDefault(result, mod);

36 return result;

37 };

38})();

39Object.defineProperty(exports, "__esModule", { value: true });

40exports.printBanner = printBanner;

41exports.isAuthenticated = isAuthenticated;

42exports.ensureAuthenticated = ensureAuthenticated;

43exports.browserLogin = browserLogin;

44exports.manualLogin = manualLogin;

45exports.interactiveLogin = interactiveLogin;

46const readline = __importStar(require("readline"));

47const crypto = __importStar(require("crypto"));

48const credentials_1 = require("./credentials");

49const config_1 = require("./config");

50const DEFAULT_API_URL = 'https://api.firecrawl.dev';

51const WEB_URL = 'https://firecrawl.dev';

52const AUTH_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes

53const POLL_INTERVAL_MS = 2000; // 2 seconds

54/**

55 * Prompt for input

56 */

57function promptInput(question) {

58 const rl = readline.createInterface({

59 input: process.stdin,

60 output: process.stdout,

61 });

62 return new Promise((resolve) => {

63 rl.question(question, (answer) => {

64 rl.close();

65 resolve(answer.trim());

66 });

67 });

68}

69/**

70 * Open URL in the default browser

71 */

72async function openBrowser(url) {

73 const { exec } = await Promise.resolve().then(() => __importStar(require('child_process')));

74 const platform = process.platform;

High

Child Process

Package source references child process execution.

dist/utils/auth.jsView on unpkg · L72

75 let command;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/utils/auth.jsView on unpkg · L49

76 switch (platform) {

77 case 'darwin':

78 command = `open "${url}"`;

79 break;

80 case 'win32':

81 command = `start "" "${url}"`;

82 break;

83 default:

84 command = `xdg-open "${url}"`;

85 }

86 return new Promise((resolve, reject) => {

87 exec(command, (error) => {

88 if (error) {

89 reject(error);

90 }

91 else {

92 resolve();

dist/commands/skills-native.jsView file

Lines 1-32javascript

1"use strict";

2/**

3 * Native skill installation — replicates `npx skills add firecrawl/cli --full-depth --global --all`

4 * without requiring Node.js or npx. Used as a fallback for binary installs.

5 */

6var __importDefault = (this && this.__importDefault) || function (mod) {

7 return (mod && mod.__esModule) ? mod : { "default": mod };

8};

9Object.defineProperty(exports, "__esModule", { value: true });

10exports.detectInstalledAgentNames = detectInstalledAgentNames;

11exports.installSkillsNative = installSkillsNative;

12exports.hasNpx = hasNpx;

13const child_process_1 = require("child_process");

14const fs_1 = __importDefault(require("fs"));

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/commands/skills-native.jsView on unpkg · L12

15const path_1 = __importDefault(require("path"));

16const os_1 = __importDefault(require("os"));

17const green = '\x1b[32m';

18const dim = '\x1b[2m';

19const bold = '\x1b[1m';

20const reset = '\x1b[0m';

21const DEFAULT_REPO = 'firecrawl/cli';

22const SKILLS_SUBDIR = 'skills';

23/**

24 * Per-harness global skills directories.

25 *

26 * These MUST match the authoritative registry used by the `npx skills` tool

27 * (antfu/skills-cli, src/agents.ts) so the native fallback path (no npx) writes

28 * to the exact same place npx would. Several dirs are NOT `.<name>/skills`

29 * (windsurf, opencode, github-copilot), so relying on the synthesized fallback

30 * would install to the wrong directory. Paths are relative to HOME.

31 *

32 * openclaw/openhands/hermes-agent are Firecrawl launch targets; openclaw and

dist/commands/init.jsView file

Lines 25-65javascript

25 ownKeys = Object.getOwnPropertyNames || function (o) {

26 var ar = [];

27 for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;

28 return ar;

29 };

30 return ownKeys(o);

31 };

32 return function (mod) {

33 if (mod && mod.__esModule) return mod;

34 var result = {};

35 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

36 __setModuleDefault(result, mod);

37 return result;

38 };

39})();

40Object.defineProperty(exports, "__esModule", { value: true });

41exports.TEMPLATES = void 0;

42exports.stepAuth = stepAuth;

43exports.findTemplate = findTemplate;

44exports.scaffoldTemplate = scaffoldTemplate;

45exports.handleInitCommand = handleInitCommand;

46const child_process_1 = require("child_process");

47const auth_1 = require("../utils/auth");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/commands/init.jsView on unpkg · L45

48const credentials_1 = require("../utils/credentials");

49const config_1 = require("../utils/config");

50const skills_install_1 = require("./skills-install");

51const skills_native_1 = require("./skills-native");

52const web_defaults_1 = require("../utils/web-defaults");

53const orange = '\x1b[38;5;208m';

54const reset = '\x1b[0m';

55const dim = '\x1b[2m';

56const bold = '\x1b[1m';

57const green = '\x1b[32m';

58const TEMPLATES_REPO = 'firecrawl/cli-templates';

59exports.TEMPLATES = [

60 // Scraping

61 {

62 name: 'Scrape / Basic',

63 description: 'Simple scrape + crawl scripts',

64 path: 'scrape-basic',

65 },

Lines 144-184javascript

144 const result = await (0, skills_native_1.installSkillsNative)(repo, {

145 agent: options.agent,

146 quiet: true,

147 });

148 const suffix = ` ${dim}(${result.skillCount})${reset}`;

149 const linked = result.linkedAgents.length > 0

150 ? ` ${dim}→ ${result.linkedAgents.join(', ')}${reset}`

151 : '';

152 console.log(` ${green}✓${reset} ${label}${suffix}${linked}`);

153 return result.skillCount;

154 }

155 catch (err) {

156 console.log(` ${dim}✗${reset} ${label}`);

157 const msg = err instanceof Error ? err.message : 'Unknown error';

158 console.error(` ${dim}${msg}${reset}`);

159 // Fall through to npx if native failed and npx is available

160 if (!(0, skills_native_1.hasNpx)())

161 throw err;

162 console.log(` ${dim}Retrying with npx...${reset}`);

163 }

164 }

165 // Fallback: npx skills add (copies files, may spray to all agents)

166 if ((0, skills_native_1.hasNpx)()) {

167 const args = (0, skills_install_1.buildSkillsInstallArgs)({

168 repo,

169 agent: options.agent,

170 yes: options.yes || options.all || true,

171 global: true,

172 includeNpxYes: true,

173 });

174 const isTty = process.stdout.isTTY;

175 if (isTty) {

176 process.stdout.write(` ${dim}↓ Installing ${label}...${reset}`);

177 }

178 try {

179 const stdout = (0, child_process_1.execSync)(args.join(' '), {

180 stdio: ['ignore', 'pipe', 'pipe'],

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/commands/init.jsView on unpkg · L164

181 env: (0, skills_install_1.cleanNpmEnv)(),

182 });

183 const count = parseSkillCount(stdout?.toString() ?? '');

184 const suffix = count != null ? ` ${dim}(${count})${reset}` : '';

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/init.jsView on unpkg