firestore-rules-creation
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill mandates robust security patterns for Firestore rules, including mandatory validator functions, strict schema enforcement, and protection against common ownership hijacking and resource exhaustion attacks.- [INDIRECT_PROMPT_INJECTION]: The skill scans codebase files to build its security model (SKILL.md, Phase-1). As it ingests untrusted project data without specific boundary delimiters, it is theoretically susceptible to indirect prompt injection from malicious source code, though the inclusion of a 'Devil's Advocate' validation phase provides a significant defense-in-depth mechanism.
Audit Metadata