firebase-auth-basics
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes 'npx -y firebase-tools@latest' to access the Firebase CLI for project creation and deployment. This is the official tool provided by the vendor for managing Firebase services.\n- [COMMAND_EXECUTION]: The instructions include standard commands for initializing and deploying authentication configurations (e.g., 'firebase-tools deploy --only auth'). These operations are necessary for the skill's primary purpose of setting up identity services.\n- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates handling of external data, such as user email inputs via 'window.prompt' and error logging in authentication flows. This reflects standard application development patterns.\n
- Ingestion points: 'references/client_sdk_web.md' (window.prompt, sign-in results) and 'references/flutter_setup.md' (error message logging).\n
- Boundary markers: Absent; the skill focuses on implementation guidelines rather than LLM-specific data containment.\n
- Capability inventory: The skill's capabilities are focused on authentication SDK integration and project-level CLI operations.\n
- Sanitization: Demonstrates standard error handling and state management provided by the Firebase SDK.
Audit Metadata