extension-to-functions-codebase
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements architectural migration patterns based on official Google/Firebase documentation. It promotes the use of V2 Cloud Functions features which include improved security defaults like Workload Identity.
- [CREDENTIALS_UNSAFE]: The migration process correctly handles sensitive parameters by converting them to Firebase SecretParam types using defineSecret. It instructs the agent to preserve parameter names, ensuring continuity of existing secret bindings in Google Cloud Secret Manager without exposing actual values.
- [INDIRECT_PROMPT_INJECTION]: As the skill involves processing and rewriting existing extension source code, it possesses an ingestion surface for untrusted data. However, the logic is limited to structural code transformations and local repository management within the user's workspace, presenting a low risk of malicious instruction execution.
Audit Metadata