firebase-cloud-functions
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Flutter CLI (
flutter pub add) to install thecloud_functionspackage. This is a standard and expected operation for the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill processes data returned from remote Firebase Cloud Functions, creating a surface where untrusted data could influence agent behavior.
- Ingestion points: External data enters the agent context via the
result.dataproperty as shown inSKILL.md. - Boundary markers: The instructions do not define boundary markers or instruct the agent to ignore instructions embedded in the function responses.
- Capability inventory: The skill involves shell command execution for package management.
- Sanitization: The skill does not explicitly mention sanitizing or validating the data returned from the function calls.
Audit Metadata