firecrawl_monitor_list
on npm:firecrawl-mcp@3.20.2
Severity
1 finding on this tool
- mediumindirect injectionf-r6-firecrawl_monitor_list
Tool `firecrawl_monitor_list` fetches external web content -- indirect-injection surface
Description: " List all Firecrawl monitors for the authenticated account. **Usage Example:** ```json { "name": "firecrawl_monitor_list", "arguments": { "limit": 20 } } ``` " -- this tool pulls externally-controlled content into the agent's context window, the canonical indirect-injection vector. Even when the user supplies the URL, content at that URL can carry hostile instructions.
fix: Sandbox the fetched content: strip prompts before forwarding to the model, constrain to an allow-list of domains, and route through capframe-guard with a `domain in [...]` caveat.
OWASP LLM01NIST MEASURE-2.3ATLAS T0051
About this tool
firecrawl_monitor_list is one of 20 tools exposed by Firecrawl MCP. The server scored 0/100 overall against the capframe rule engine (source: sandbox). Last scanned 2026-06-05.
The findings above are emitted by the public capframe.findings.v1 schema. Disagree with one? Open an issue.