The Agent Skills Directory

[SAFE]: Secure Secret Management: The skill correctly promotes the use of defineSecret and proper secret binding to function triggers, ensuring sensitive information is handled via Google Cloud Secret Manager rather than insecure environment variables.
[SAFE]: Declarative Permissions: It utilizes the requiresRole and requiresAPI SDK features to manage infrastructure requirements natively in code, which follows the principle of least privilege and reduces manual configuration errors.
[SAFE]: Trusted Resources: All external links, documentation references, and support email addresses point to official, verified Google and Firebase domains.
[SAFE]: Input Validation: The instructions guide the agent to implement validationRegex and nonEmpty constraints on configuration parameters, improving the security and reliability of the generated codebase.
[SAFE]: Modernization Best Practices: The skill includes specific safety checks for Authentication triggers, advising the agent to halt if a secure V2 alternative is not yet available, preventing unintentional downgrades in security posture during migration.

extension-to-functions-codebase