skills/albertmartorell1975/android-ai-workflow-foundation/firebase-remote-config-basics/Gen Agent Trust Hub
firebase-remote-config-basics
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx -y firebase-tools@latestto execute the Firebase CLI. This fetches the package from the official npm registry. It also references the official Firebase iOS SDK repository (https://github.com/firebase/firebase-ios-sdk.git) for dependency management in iOS projects. Both sources are well-known and maintained by a trusted organization. - [COMMAND_EXECUTION]: The skill executes various Firebase CLI commands to manage project settings (
projects:create,apps:create), retrieve configurations (remoteconfig:get), and deploy templates (deploy --only remoteconfig). These commands are standard for Firebase development workflows. - [PROMPT_INJECTION]: Instructions include a mandatory user review step ("STOP and ask the user to verify your changes before proceeding to deployment") which prevents the agent from autonomously pushing potentially malicious or incorrect configuration changes without oversight.
- [DATA_EXFILTRATION]: While the skill manages configuration files (
remote_config.json) and project metadata, all operations are performed locally or directed to the official Firebase service. There are no patterns suggesting data is sent to unauthorized third-party domains.
Audit Metadata