firebase-buddy
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of official
firebaseandfirebase-toolsNode.js packages. These are standard, well-known dependencies for Firebase development. - [COMMAND_EXECUTION]: Provides standard CLI commands for Firebase management such as
firebase login,firebase init, andfirebase deploy. These are intended for user-initiated development and deployment workflows. - [CREDENTIALS_UNSAFE]: The skill provides a template for an environment variable file (
.env.local) to store Firebase configuration. It uses generic placeholders (e.g.,your-key,your-project) and correctly advises accessing them viaprocess.env, which is a standard security practice for managing application configuration. - [SAFE]: Includes guidance on Firestore security rules, providing a permissive development rule with an explicit warning that it is not for production, alongside secure patterns for authenticated and owner-based access.
Audit Metadata