The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill mentions the installation of firebase-tools using npm and npx. This is the official command-line interface for Firebase and is considered a trusted tool from a well-known service for project management and deployment.
[COMMAND_EXECUTION]: Provides instructions for using the firebase CLI to create databases, manage indexes, and deploy security rules. These commands are standard operations within the Firebase ecosystem and are directed at official vendor tooling.
[PROMPT_INJECTION]: The security_rules.md file contains detailed instructions that guide the agent's behavior when generating Firestore security rules. These instructions emphasize 'Default Deny' and 'Least Privilege' principles and include a mandatory Phase-3 'Devil's Advocate Attack' where the agent must attempt to exploit its own generated rules. This is a security-enhancing pattern rather than a malicious injection.
[SAFE]: No malicious patterns, hardcoded credentials, data exfiltration attempts, or obfuscated content were detected. The skill focuses on teaching and implementing robust security practices for database configuration.

firebase-firestore-enterprise-native-mode