firebase-firestore-standard

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions to install and use the official firebase-tools CLI tool for project provisioning, deployment, and local emulation.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx to dynamically download and execute the firebase-tools package from the official npm registry.
  • [PROMPT_INJECTION]: The skill incorporates a codebase scanning phase to generate Firestore security rules, which serves as an ingestion point for local project data. Ingestion points: Local project codebase analysis for queries and models. Boundary markers: Not specified. Capability inventory: Updating local configuration files such as firestore.rules. Sanitization: None.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 10:17 PM