The Agent Skills Directory

[SAFE]: The skill functions as a documentation guide for the Shiny.Push.FirebaseMessaging library, providing standard implementation patterns and code snippets for developers.
[CREDENTIALS_UNSAFE]: The code examples use generic placeholders such as "your-api-key", "your-app-id", and "your-sender-id" for manual configuration. It correctly identifies GoogleService-Info.plist and google-services.json as external configuration files required by the Firebase SDK, without attempting to access or exfiltrate them from the host environment.
[NO_CODE]: The skill contains only Markdown documentation and C# code snippets intended for user reference; it does not include any scripts or commands that execute within the agent's environment.
[INDIRECT_PROMPT_INJECTION]: While the skill defines a data ingestion point via the OnReceived method in MyPushDelegate (SKILL.md) which handles external push notifications, the skill does not provide any automated capabilities or subprocess execution that could be exploited by malicious payloads in those notifications.

shiny-firebase