firebase-auth-manager

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of standard command-line tools such as gcloud, firebase-tools, and curl to manage Firebase configurations. These commands are directed at official Google Cloud and Firebase management interfaces.
  • [EXTERNAL_DOWNLOADS]: Network operations are restricted to well-known, official Google API endpoints (e.g., identitytoolkit.googleapis.com) for the purpose of initializing and configuring Identity Platform services.
  • [DATA_EXFILTRATION]: No suspicious data exfiltration patterns were detected. While the skill involves handling sensitive credentials like clientSecret and OAuth client IDs, it provides instructions for users to configure their own projects rather than exfiltrating data to unknown third parties.
  • [PROMPT_INJECTION]: The content is purely technical and instructional, containing no directives aimed at overriding agent behavior or bypassing safety filters.
  • [CREDENTIALS_UNSAFE]: The skill correctly uses placeholders (e.g., CLIENT_SECRET, YOUR_BUNDLE_ID) and encourages best practices, such as using gcloud auth print-access-token for transient authentication rather than hardcoding static secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 06:02 AM
Security Audit — agent-trust-hub — firebase-auth-manager