firebase-data-connect
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation includes instructions for using the Firebase CLI via 'npx -y firebase-tools@latest' to initialize projects, run local emulators, generate SDKs, and deploy services. These are standard operations for the described technology.
- [EXTERNAL_DOWNLOADS]: The skill references and utilizes official resources from the Firebase ecosystem, including the 'firebase-tools' package from the npm registry and the official Firebase iOS SDK repository on GitHub.
- [CREDENTIALS_UNSAFE]: References to sensitive information like 'FIREBASE_TOKEN' are handled using standard environment variable patterns intended for CI/CD environments, rather than hardcoding actual secrets.
Audit Metadata