firebase-data-connect
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standardized instructions for developing and deploying relational database services using official Firebase infrastructure and tooling.
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx -y firebase-tools@latestto manage the lifecycle of the SQL Connect service. This is a standard practice for the Firebase platform and targets official vendor tooling. - [COMMAND_EXECUTION]: Provides instructions for running local emulators and deployment commands (
firebase-tools) which are necessary for the development of the database service. - [PROMPT_INJECTION]: Includes a dedicated security reference (security.md) that teaches developers how to implement robust authorization using the
@authdirective and data validation via@checkand@redactto protect against unauthorized access or malicious input at the GraphQL layer. - [REMOTE_CODE_EXECUTION]: Provides clear warnings and secure implementation patterns for Native SQL features. It emphasizes the use of parameterized queries (
USINGclause) and identifier escaping (format('%I')) to prevent SQL injection when bypassing the GraphQL abstraction.
Audit Metadata