firebase-basics

Warn

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill modifies shell initialization files, including ~/.bashrc, ~/.zshrc, ~/.profile, and ~/.bash_profile, to append directories to the system PATH and source configuration scripts. While common for developer environment setup, these actions constitute persistence mechanisms.
  • [COMMAND_EXECUTION]: The instructions direct the agent to modify various configuration files such as mcp_config.json, mcp.json, and VS Code's mcp.json to register and configure the Firebase MCP server across multiple agent environments.
  • [EXTERNAL_DOWNLOADS]: The skill fetches and installs several external dependencies and tools, including the Firebase CLI (firebase-tools) via npx, the FlutterFire CLI, and the Node Version Manager (nvm) from GitHub.
  • [EXTERNAL_DOWNLOADS]: The skill provides workflows to install additional agent skills and extensions from the firebase/agent-skills repository on GitHub.
Audit Metadata
Risk Level
MEDIUM
Analyzed
May 4, 2026, 07:07 AM
Security Audit — agent-trust-hub — firebase-basics