firebase-auth
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
firebase_authpackage, which is a standard library provided by Google via the official Flutter/Dart package registry. This is a trusted and expected dependency for the stated purpose. - [COMMAND_EXECUTION]: The documentation includes the command
flutter pub add firebase_authfor project setup. This is a routine development task and does not involve malicious shell execution or argument injection. - [SAFE]: The skill includes explicit security warnings and best practices, such as:
- Recommending re-authentication for sensitive operations.
- Warning against the use of SMS-based Multi-Factor Authentication (MFA) due to spoofing risks.
- Explaining email enumeration protection to prevent user account discovery.
- Advising against passing user emails in redirect URL parameters for email link authentication to prevent session injection.
Audit Metadata