firebase-data-connect
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill frequently utilizes
npx -y firebase-tools@latestto perform essential development tasks such as project initialization, schema compilation, SDK generation, and production deployment. These commands target official tooling from a trusted vendor. - [EXTERNAL_DOWNLOADS]: Documentation in
reference/sdk_android.mdprovidescurlcommands to query the official Google Maven Repository (dl.google.com) for the latest versions of Firebase dependencies, ensuring developers use up-to-date and verified libraries. - [DYNAMIC_EXECUTION]: The skill discusses advanced use cases involving raw SQL and PL/pgSQL stored procedures. It includes detailed security constraints to prevent SQL injection during dynamic execution, emphasizing the use of positional parameters and identifier allowlisting.
- [INDIRECT_PROMPT_INJECTION]: The skill processes developer-supplied GraphQL schemas and operations which define the application's backend logic.
- Ingestion points: Schema files (
schema.gql) and operation definitions (queries.gql,mutations.gql). - Boundary markers: The platform requires explicit authorization directives (
@auth) and schema validation via thecompilecommand to maintain security boundaries. - Capability inventory: The skill supports database mutations, file system writes for SDK generation, and network operations for Cloud SQL deployment.
- Sanitization: The guidance mandates parameterization of user inputs at the GraphQL boundary and provides patterns for safe dynamic identifier injection in SQL.
Audit Metadata