firebase-admin-sdk
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Membrane CLI (
membrane) to manage authentication (membrane login), established connections (membrane connect), and the execution of Firebase-related actions (membrane action run). These are standard operational commands for the vendor's platform. - [EXTERNAL_DOWNLOADS]: The skill documentation guides the user to install the official CLI tool
@membranehq/clifrom the NPM registry. This package is managed by the skill author and is necessary for the intended functionality. - [PROMPT_INJECTION]: The skill exposes a surface for indirect prompt injection by interpolating natural language descriptions into action creation and search queries.
- Ingestion points: User-provided strings for the
--intentand--descriptionparameters inSKILL.md. - Boundary markers: Not present in the command-line examples provided in the instructions.
- Capability inventory: The skill allows the execution of generated actions using
membrane action runas described inSKILL.md. - Sanitization: The skill relies on the backend Membrane platform to sanitize and validate the synthesis of actions from natural language input.
- [CREDENTIALS_UNSAFE]: The skill correctly follows security best practices by advising against requesting API keys or tokens directly from the user, instead delegating credential management to the Membrane platform.
Audit Metadata