Latest release: v2026.9.2Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidenceCredentials
The plugin reads Firecrawl API credentials from plugin config or FIRECRAWL_API_KEY and sends search/scrape requests to Firecrawl or a validated self-hosted endpoint, which is expected for this provider.
Install Mechanism
The package contains manifest, README, and dist files, declares OpenClaw runtime extensions, has no lifecycle scripts, and is not configured to activate on startup.
Instruction Scope
The runtime exposes bounded tool parameters for queries and HTTP(S) URLs, wraps external content as untrusted, and blocks private/internal scrape targets.
Persistence & Privilege
No local persistence, privilege escalation, or background worker behavior was found; search caching is in-memory, while Firecrawl scrape requests default to allowing provider-side cache storage.
Purpose & Capability
The package registers Firecrawl web search, web fetch, and scrape/search tools matching the README, package metadata, and plugin manifest.
Assessment
Install this only if you are comfortable sending search queries, target URLs, and scraped page requests to Firecrawl or your configured Firecrawl-compatible endpoint. Protect the API key like any other service credential, and disable or override provider-side scrape caching when the page content is sensitive.dist/firecrawl-fetch-provider-CIpxLKLq.js:38
File appears to expose a hardcoded API secret or token.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.Verification
Tags
OpenClaw Firecrawl Plugin
Official OpenClaw plugin for Firecrawl.
Install from OpenClaw:
openclaw plugins install @openclaw/firecrawl-plugin
openclaw gateway restart
See https://docs.openclaw.ai/tools/firecrawl for setup and configuration.