firebase-auth-manager
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of standard command-line tools such as
gcloud,firebase-tools, andcurlto manage Firebase configurations. These commands are directed at official Google Cloud and Firebase management interfaces. - [EXTERNAL_DOWNLOADS]: Network operations are restricted to well-known, official Google API endpoints (e.g.,
identitytoolkit.googleapis.com) for the purpose of initializing and configuring Identity Platform services. - [DATA_EXFILTRATION]: No suspicious data exfiltration patterns were detected. While the skill involves handling sensitive credentials like
clientSecretand OAuth client IDs, it provides instructions for users to configure their own projects rather than exfiltrating data to unknown third parties. - [PROMPT_INJECTION]: The content is purely technical and instructional, containing no directives aimed at overriding agent behavior or bypassing safety filters.
- [CREDENTIALS_UNSAFE]: The skill correctly uses placeholders (e.g.,
CLIENT_SECRET,YOUR_BUNDLE_ID) and encourages best practices, such as usinggcloud auth print-access-tokenfor transient authentication rather than hardcoding static secrets.
Audit Metadata