The Agent Skills Directory

[COMMAND_EXECUTION]: The bootstrap-firebase.sh script executes gcloud and gh CLI commands to configure cloud resources and repository secrets. All inputs are appropriately quoted to prevent shell-based injection attacks.\n- [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and run firebase-tools. It mitigates supply-chain risks by enforcing strict version pinning and providing regression tests to verify consistent versioning.\n- [SAFE]: Credential management is performed securely; Service Account keys are generated into temporary files, uploaded to GitHub Secrets, and immediately deleted via an exit trap to prevent local leakage.\n- [SAFE]: The GitHub Actions deployment workflow is designed with security in mind, utilizing environment variables for parameter passing to prevent potential script injection from repository variables.

setup-firebase-hosting