firebase-nextjs-integration-strategies
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions or code snippets. The skill follows industry standards for Next.js and Firebase integration.
- [CREDENTIALS_UNSAFE]: The skill correctly demonstrates using environment variables for both Client and Admin SDK configurations (e.g.,
NEXT_PUBLIC_FIREBASE_API_KEY,FIREBASE_ADMIN_PRIVATE_KEY) instead of hardcoding secrets. It specifically recommends usingHttpOnlycookies for token storage. - [COMMAND_EXECUTION]: No usage of subprocesses, shell commands, or dangerous execution functions was identified.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any remote downloads or script executions. It relies on standard package imports.
- [REMOTE_CODE_EXECUTION]: No patterns involving remote code execution or dynamic code evaluation were found.
Audit Metadata