Latest release: v2026.10.6Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidenceCredentials
Queries, requested URLs, and configured Firecrawl credentials are sent to the official HTTPS endpoint or a configured private server. Endpoint restrictions and scrape-target checks are present.
Install Mechanism
Uses standard OpenClaw plugin installation and bundled JavaScript, with no package lifecycle scripts.
Instruction Scope
No bundled skills or agent instructions are declared. Runtime registration exposes web providers and tools, with returned content marked untrusted.
Persistence & Privilege
Search results use a configurable in-memory cache; scraping enables upstream caching by default with a per-call override. No background workers, local indexing, or privilege escalation appear.
Purpose & Capability
Search and scrape tools match the stated Firecrawl integration; inspected code shows no unrelated data collection or destructive actions.
Assessment
Search queries and requested URLs are shared with Firecrawl or your configured private server. Scraping caches content upstream by default and may consume API credits; review cache and proxy settings before submitting sensitive URLs. These behaviors are disclosed in the [setup documentation](https://docs.openclaw.ai/tools/firecrawl). SkillSpector was not applicable because this package bundles no skills; the verdict follows inspection of the plugin code.dist/.setup/firecrawl-fetch-provider-CWYM223u.mjs:38
File appears to expose a hardcoded API secret or token.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.Verification
Tags
OpenClaw Firecrawl Plugin
Official OpenClaw plugin for Firecrawl.
Install from OpenClaw:
openclaw plugins install @openclaw/firecrawl-plugin
openclaw gateway restart
See https://docs.openclaw.ai/tools/firecrawl for setup and configuration.