Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add melodic-software/claude-code-plugins --skill firecrawlgit clone --depth 1 https://github.com/melodic-software/claude-code-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/melodic-software/claude-code-plugins/firecrawl)<a href="https://agentmods.dev/skills/melodic-software/claude-code-plugins/firecrawl"><img src="https://agentmods.dev/badge/skills/melodic-software/claude-code-plugins/firecrawl/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/melodic-software/claude-code-plugins/firecrawl"><img src="https://agentmods.dev/badge/skills/melodic-software/claude-code-plugins/firecrawl.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 124 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00161 | $0.03511 |
| Opus 5.5 | $0.00064 | $0.01404 |
| Sonnet 5.5 | $0.00032 | $0.00702 |
| Haiku 4.5 | $0.00016 | $0.00351 |
Grade A, and why
firecrawl scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **Transient DNS 503 on `api.firecrawl.dev` from sandboxed sessions.** Some cloud egress proxies intermittently return "DNS cache overflow". Retry after ~30s. This affects both the CLI and direct curl; it's an egress is How it starts
The opening of the file, as written. The whole thing — 175 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Arguments. <scrape|search|crawl|map|parse|interact|agent|monitor|developer|research|doctor|…> [args]. The command is required; the full set adds search-feedback and credit-usage.
Pre-computed context
Status: !command -v firecrawl >/dev/null 2>&1 && firecrawl --status 2>/dev/null | head -10 || command -v firecrawl >/dev/null 2>&1 || echo "NOT INSTALLED — run: npm install -g firecrawl-cli"
The firecrawl --status line above includes auth state. If it shows unauthenticated (or the CLI is missing), the fix is: obtain a key from the https://firecrawl.dev dashboard and set FIRECRAWL_API_KEY as an OS user environment variable.
Purpose
firecrawl-cli is the CLI alternative to the firecrawl-mcp MCP server. It wraps api.firecrawl.dev with agent defaults: retry/rotation on anti-bot blocks, JS rendering, and an -o <path> flag that writes results to disk instead of streaming into the conversation.
When WebFetch fails on a large page, an MCP equivalent streams the whole document into the
conversation. This skill writes it to a spill file and lets the agent Read only the slice it
needs. The saving scales with document size, so it is largest on exactly the long pages that
defeat WebFetch in the first place.
When to reach for this skill
| Situation | Command | Why |
|---|---|---|
| WebFetch returned 403/429 (Cloudflare, PerimeterX, rate limit) | firecrawl scrape |
Managed IP rotation + headless browser |
| Page is a SPA or requires JS rendering | firecrawl scrape |
WebFetch is a plain HTTP client. No JS |
| Page needs clicks, form fills, or login | firecrawl interact |
Full browser actions, not just fetch |
| Need web search, not a known URL | firecrawl search |
Search-and-scrape in one call |
| Discovering all URLs on a site | firecrawl map |
Cheap URL-only discovery |
| Bulk extraction across a site | firecrawl crawl |
Follows links, respects depth |
| Local PDF / DOCX / XLSX / HTML file on disk → markdown | firecrawl parse |
Server-side text extraction; no local Office tooling required |
| Natural-language "find me X on the web" | firecrawl agent |
Hosted agent with Spark models |
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · +4 lines · +6 tokens per session 994fe5edec90
- 9d ago Changed 453f3276e663
- 18d ago Changed 6d6500f13a8c
- 19d ago Changed · +22 lines 7ece921135f7
- 20d ago Changed · +2 lines 1f6cbb68664b
- 1mo ago Changed a2eaef790f6c
- 1mo ago Changed · +3 lines · -31 tokens per session 545aeec21484
- 1mo ago First seen · 144 lines · 186 tokens per session scan A 7bcddf9fd287
firecrawl is a skill published in the GitHub repository melodic-software/claude-code-plugins (26 stars, last pushed today), licensed MIT. It adds 161 tokens to every session and 3,511 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
parallel-orchestrator
Manage parallel Claude Code workstreams using git worktrees. Use when: splitting large tasks across multiple workers, coordinating parallel development, monitoring worker progress, integrating completed work, analyzing work item documents (code reviews, issue lists). Triggers: parallel, orchestrator, worktrees…
parallel-worker
Execute focused implementation tasks in a parallel workflow. Use when: working on assigned files in a worktree, making checkpoint commits, signaling dependencies or blockers, completing orchestrator-assigned tasks. Triggers: worker, checkpoint, worktree, assigned scope, commit prefix, parallel task.
optimize-local-search
For NP-hard optimization: TSP, scheduling, assignment problems. Uses greedy construction + local improvement (2-opt, hill climbing).
pass-function-as-arg
For generic algorithms: strategy pattern, callbacks, configurable behavior. Pass functions as parameters to customize algorithm behavior.
solve-constraint-puzzle
For constraint satisfaction: Sudoku, scheduling, N-queens, logic puzzles, SAT-like problems, assignment problems. Uses propagate-then-search pattern.
test-with-examples
For example-driven development: test cases as specifications, input/output pairs, documentation through examples.