firebase-data-connect

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standardized instructions for developing and deploying relational database services using official Firebase infrastructure and tooling.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx -y firebase-tools@latest to manage the lifecycle of the SQL Connect service. This is a standard practice for the Firebase platform and targets official vendor tooling.
  • [COMMAND_EXECUTION]: Provides instructions for running local emulators and deployment commands (firebase-tools) which are necessary for the development of the database service.
  • [PROMPT_INJECTION]: Includes a dedicated security reference (security.md) that teaches developers how to implement robust authorization using the @auth directive and data validation via @check and @redact to protect against unauthorized access or malicious input at the GraphQL layer.
  • [REMOTE_CODE_EXECUTION]: Provides clear warnings and secure implementation patterns for Native SQL features. It emphasizes the use of parameterized queries (USING clause) and identifier escaping (format('%I')) to prevent SQL injection when bypassing the GraphQL abstraction.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 07:41 PM