firebase-basics

SUSPICIOUS: the main Firebase setup behavior is coherent and uses official Firebase tooling, but the skill's footprint expands into installing/updating a broader suite of agent skills and plugins, creating notable transitive-trust risk. No clear credential theft, exfiltration, obfuscation, or malicious pre-execution behavior is present; the main concerns are unpinned `@latest` execution and same-workflow instructions that load additional skills beyond the stated narrow basic-setup role.