Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add HybridAIOne/hybridclaw --skill firecrawlgit clone --depth 1 https://github.com/HybridAIOne/hybridclawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hybridaione/hybridclaw/firecrawl)<a href="https://agentmods.dev/skills/hybridaione/hybridclaw/firecrawl"><img src="https://agentmods.dev/badge/skills/hybridaione/hybridclaw/firecrawl/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/hybridaione/hybridclaw/firecrawl"><img src="https://agentmods.dev/badge/skills/hybridaione/hybridclaw/firecrawl.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 106 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Data Exfiltration · line 121 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.02185 |
| Opus 5 | $0.00014 | $0.01092 |
| Sonnet 5 | $0.00006 | $0.00437 |
| Haiku 4.5 | $0.00003 | $0.00218 |
Grade A, and why
firecrawl scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
`FIRECRAWL_SELF_HOST_API_KEY`. Do not use bash/curl for live Firecrawl calls How it starts
The opening of the file, as written. The whole thing — 232 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Firecrawl
Use this skill for unauthenticated public web ingestion when HTTP fetch and server-side parsing are enough. Firecrawl is the cheap path for public pages and docs. Use the browser skill instead when the task needs login, interaction, form filling, visual inspection, or client-side state. Do not use Firecrawl to bypass access controls.
Credential Rules
For managed mode, set or update the Firecrawl API key in this order:
- Browser admin: open the active HybridClaw admin URL ending in
/admin/secretsand setFIRECRAWL_API_KEY. - Browser
/chator TUI fallback:/secret set FIRECRAWL_API_KEY "<fc-api-key>". - Local console fallback:
hybridclaw secret set FIRECRAWL_API_KEY "<fc-api-key>"
For a self-hosted Firecrawl instance, set the gateway-reachable base URL in the runtime environment or pass it explicitly to the helper:
export FIRECRAWL_SELF_HOST_BASE_URL="http://firecrawl:3002"
The helper accepts base URLs with or without /v2 and normalizes them to the
v2 API path. If your self-hosted Firecrawl deployment enables API
authentication, set that token separately in the same order:
- Browser admin: open the active HybridClaw admin URL ending in
/admin/secretsand setFIRECRAWL_SELF_HOST_API_KEY. - Browser
/chator TUI fallback:/secret set FIRECRAWL_SELF_HOST_API_KEY "<self-host-api-key>". - Local console fallback:
hybridclaw secret set FIRECRAWL_SELF_HOST_API_KEY "<self-host-api-key>"
Use HTTPS for any self-host endpoint outside a trusted private network, especially when --self-host-auth is enabled; plain HTTP can expose bearer tokens on untrusted networks.
For live calls, run the colocated helper to build an http_request payload and
pass only the emitted httpRequest object to the built-in http_request tool.
The helper sets bearerSecretName: "FIRECRAWL_API_KEY" so the gateway injects
the managed token server-side. In self-host mode, pass --self-host-auth only
when the deployment requires a bearer token; the helper then uses
FIRECRAWL_SELF_HOST_API_KEY. Do not use bash/curl for live Firecrawl calls
when http_request is available, and never ask the user to paste API keys into
chat.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 232 lines · 28 tokens per session scan A 4fb96d881d01
firecrawl is a skill published in the GitHub repository HybridAIOne/hybridclaw (132 stars, last pushed yesterday), licensed MIT. It adds 28 tokens to every session and 2,185 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
browserwing-executor
Control browser automation through HTTP API. Supports page navigation, element interaction (click, type, select), data extraction, accessibility snapshot analysis, screenshot, JavaScript execution, and batch operations.
dev-browser
Browser automation with persistent page state. Use when users ask to navigate websites, fill forms, take screenshots, extract web data, test web apps, or automate browser workflows. Trigger phrases include "go to [url]", "click on", "fill out the form", "take a screenshot", "scrape", "automate", "test the website"…
pixelbrowse
Screenshot and visually read any web page or document using pixelshot. Use instead of fetching raw HTML when you need to see what a page looks like, read visual content (charts, diagrams, infographics), check layouts, or verify UI. Triggers: "look at this page", "screenshot", "what does this site look like", "check…
browserwing-admin
Manage and operate BrowserWing — an intelligent browser automation platform. Install dependencies, configure LLM, create/manage/execute automation scripts, use AI-driven exploration to generate scripts, browse the script marketplace, and troubleshoot issues.
serper-search
Search the public web through Serper instead of the built-in WebSearch tool. Use when an agent needs current information, general web sources, or URLs not available from local files and project APIs. SERPERAPIKEY is available in the environment.
browser
Browser automation — setup the bsession environment, fetch info from a website (one-shot), create scripted automations (one-shot or recurring), or debug existing sessions. Works from any repo.