firebase-storage
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements surfaces for ingesting untrusted file data through React components and server-side buffers. This is a characteristic of storage skills and is well-managed here.
- Ingestion points: FileUpload and ImageUpload components in SKILL.md handle raw user file inputs.
- Boundary markers: The skill provides an extensive templates/storage.rules file and embedded security rules that enforce authentication, resource ownership, and strict size/type limits.
- Capability inventory: Scripts include capabilities for cloud storage writes (uploadBytes), metadata modification (updateMetadata), and file deletion (deleteObject).
- Sanitization: The skill explicitly recommends and provides code for unique filename generation and client-side validation to prevent object overwrites and DoS attacks.
- [EXTERNAL_DOWNLOADS]: The skill references official Firebase and Google Cloud documentation and standard packages (firebase, firebase-admin). These originate from well-known services and are documented for standard implementation purposes.
Audit Metadata