firebase-data-connect

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill is a documentation and reference repository for Firebase SQL Connect, providing guidance on data modeling, operations, and SDK integration.
  • [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: Fetches and executes the official firebase-tools CLI from the public NPM registry using npx for project initialization and deployment.
  • [COMMAND_EXECUTION]: Instructs the agent to execute standard Firebase CLI commands to manage the local development environment, compile GraphQL schemas, and deploy services to Cloud SQL.
  • [DYNAMIC_EXECUTION]: Provides reference material for 'Native SQL' operations which allow direct PostgreSQL execution. The documentation includes security constraints, specifically mandating positional parameters to prevent SQL injection.
  • [INDIRECT_PROMPT_INJECTION]: The skill constructs database schemas and API connectors that ingest external data. It provides extensive security documentation on implementing field-level and row-level authorization using @auth, @check, and @redact directives.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 01:43 PM
Security Audit — agent-trust-hub — firebase-data-connect