firebase-data-connect
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a documentation and reference repository for Firebase SQL Connect, providing guidance on data modeling, operations, and SDK integration.
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: Fetches and executes the official
firebase-toolsCLI from the public NPM registry usingnpxfor project initialization and deployment. - [COMMAND_EXECUTION]: Instructs the agent to execute standard Firebase CLI commands to manage the local development environment, compile GraphQL schemas, and deploy services to Cloud SQL.
- [DYNAMIC_EXECUTION]: Provides reference material for 'Native SQL' operations which allow direct PostgreSQL execution. The documentation includes security constraints, specifically mandating positional parameters to prevent SQL injection.
- [INDIRECT_PROMPT_INJECTION]: The skill constructs database schemas and API connectors that ingest external data. It provides extensive security documentation on implementing field-level and row-level authorization using
@auth,@check, and@redactdirectives.
Audit Metadata