firebase-firestore
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Firebase CLI tools via
npxfrom the official npm registry and queries version information from the official Google Maven repository (dl.google.com). These are trusted sources for the Firebase platform and are used to ensure correct SDK versions are employed. - [COMMAND_EXECUTION]: Employs standard
firebase-toolscommands to list, create, and manage Firestore databases, alongsidegradlewfor dependency inspection andflutter pubfor package management. All executed commands are restricted to the intended administrative and development scope defined by the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests Firestore database metadata (edition and location) to determine whether to apply Standard or Enterprise reference guides. This represents a standard architectural branching pattern and does not expose a high-risk injection surface.
- [DYNAMIC_EXECUTION]: Includes instructions for the agent to extract and read specific documentation text files (
pipeline.docs.txt,expressions.docs.txt) from locally cached Maven source JARs. This technique is used for local context retrieval from trusted dependency artifacts and does not involve the execution of untrusted code.
Audit Metadata