setup-firebase
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various Firebase CLI and npm commands to automate infrastructure setup. This includes project creation, hosting initialization, and test deployments. These operations are within the expected scope of the skill's purpose.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting user-provided application names via the AskUserQuestion tool.
- Ingestion points: User input for project names is collected in Step 1 of SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are applied to the user input.
- Capability inventory: The skill uses subprocess execution for firebase and npm tools across several steps in SKILL.md.
- Sanitization: The skill derives kebab-case and title-case strings from the input, which provides implicit validation, and includes a mandatory human-in-the-loop confirmation step before any commands are executed.
Audit Metadata