firebase-analytics
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Firebase SDK and Google Services version metadata from official Google Maven repositories (
dl.google.com) and the official Firebase iOS SDK GitHub repository releases via API. These are used to ensure the integration uses the most recent stable versions. - [COMMAND_EXECUTION]: Employs standard industry tools for project configuration, including the Firebase CLI (
firebase-tools), Android Debug Bridge (adb), Gradle (gradlew), and CocoaPods (pod). These commands are used for legitimate setup, dependency syncing, and debugging tasks. - [DATA_EXFILTRATION]: Instructs the agent to log a temporary diagnostic event (
gaac_app_open) to the user's own Firebase Analytics project to verify correct SDK initialization. The instructions explicitly state that this code should be removed after verification, and the data is contained within the user's controlled project environment.
Audit Metadata