firebase-emulator
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and commands for interacting with local Firebase emulators (Firestore, Auth, Functions). All network operations target 127.0.0.1 and are used for legitimate testing and development purposes.
- [CREDENTIALS_UNSAFE]: The use of 'Authorization: Bearer owner' is identified. This is a standard, publicly documented administrative bypass for the Firebase Firestore Emulator and does not represent a leak of production credentials.
- [COMMAND_EXECUTION]: The skill uses local diagnostic commands like lsof and curl to verify the state of local services. These are restricted to the local environment and the intended purpose of the skill.
- [DATA_EXPOSURE]: The skill interacts with local project configuration files (firebase.json, .firebaserc). This is standard behavior for a development tool and does not expose data externally.
Audit Metadata