firebase-basics

SUSPICIOUS: The Firebase CLI actions are broadly consistent with the stated purpose and appear to use official tooling, but the skill unnecessarily mandates transitive installation of another skill through an unpinned third-party CLI (`skills`). That extra trust chain and mutable execution path raise medium-high security risk even without clear evidence of malware or credential theft.