firebase-app-hosting-basics
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
npx -y firebase-tools@latestto execute administrative tasks such as deployment (deploy), backend management (backends:list,backends:create), and secret handling (secrets:set,secrets:grantaccess). These are standard operations for managing Firebase services. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided configuration files, specifically
firebase.jsonandapphosting.yaml, which defines an attack surface for indirect injection if these files are sourced from an untrusted environment. - Ingestion points: Reads
firebase.jsonandapphosting.yamlfrom the project root. - Boundary markers: None identified in the prompt templates.
- Capability inventory: Execution of shell commands via the Firebase CLI, including project deletion and secret management.
- Sanitization: None; the skill assumes valid configuration files for its primary purpose.
Audit Metadata