firebase-buddy

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of official firebase and firebase-tools Node.js packages. These are standard, well-known dependencies for Firebase development.
  • [COMMAND_EXECUTION]: Provides standard CLI commands for Firebase management such as firebase login, firebase init, and firebase deploy. These are intended for user-initiated development and deployment workflows.
  • [CREDENTIALS_UNSAFE]: The skill provides a template for an environment variable file (.env.local) to store Firebase configuration. It uses generic placeholders (e.g., your-key, your-project) and correctly advises accessing them via process.env, which is a standard security practice for managing application configuration.
  • [SAFE]: Includes guidance on Firestore security rules, providing a permissive development rule with an explicit warning that it is not for production, alongside secure patterns for authenticated and owner-based access.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 05:04 AM
Security Audit — agent-trust-hub — firebase-buddy