firebase-crashlytics

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Recommends the use of official Firebase and Flutter packages (firebase_crashlytics, firebase_analytics). These are well-known, trusted dependencies maintained by Google.
  • [COMMAND_EXECUTION]: Instructs the use of standard development commands like flutter pub add and firebase crashlytics:symbols:upload to manage dependencies and upload debug symbols. These are benign operations within a standard Flutter development environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines mechanisms for capturing and logging runtime application errors and events. This data is transmitted to Firebase for monitoring purposes. While these logs could potentially contain data from untrusted sources, the skill encourages best practices to avoid sensitive data exposure.
  • Ingestion points: FirebaseCrashlytics.instance.log, setCustomKey, and automated error reporting code snippets in SKILL.md.
  • Boundary markers: None observed in the provided instructions; standard telemetry handling applies.
  • Capability inventory: Uses network operations via the Firebase SDK to transmit telemetry data to the Firebase service.
  • Sanitization: The skill specifically advises against putting unique identifiers or sensitive data directly in exception messages, favoring the use of custom keys for better data management.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:10 PM