{"data":{"skill":{"slug":"firebase-firebase-security-rules-auditor","name":"firebase-security-rules-auditor","icon":"📦","repo":"https://github.com/firebase/agent-skills/tree/main/skills/firebase-security-rules-auditor/","status":"approved","author":"firebase","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"df463d89-9b35-47ab-9110-5638ebb5ab60","skill_id":"607eb219-dda0-4614-bb35-a880d7030a86","version":2,"content_hash":"3f8b8f0d1a9404af199e467d18ee90c3","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Static analysis reported external command, weak cryptography, and system reconnaissance patterns in SKILL.md. Review found these are documentation-only false positives: Markdown code spans, checklist wording, and output schema field names. No executable code, prompt injection, network access, filesystem access, or confirmed malicious behavior was found.","remediation":[],"risk_factor_evidence":[],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Static Finding Dismissed: Markdown Code Spans","locations":[{"file":"SKILL.md","line_end":19,"line_start":19}],"confidence":0.95,"description":"The reported Ruby or shell backtick execution at SKILL.md line 19 is Markdown formatting around Firestore rule helper names. It is not executable code and does not invoke a shell.","confidence_reasoning":"Line 19 is checklist prose containing inline Markdown code spans. There is no script, interpreter directive, or command execution context."},{"title":"Static Finding Dismissed: Weak Cryptography Keyword Match","locations":[{"file":"SKILL.md","line_end":3,"line_start":3},{"file":"SKILL.md","line_end":41,"line_start":41}],"confidence":0.93,"description":"The weak cryptography alerts at SKILL.md lines 3 and 41 are false positives from security-related text and an output field named issue. No cryptographic algorithm is referenced or used.","confidence_reasoning":"The lines contain descriptive skill metadata and a reporting schema field. No MD5, SHA-1, DES, RC4, or comparable weak algorithm appears in context."},{"title":"Static Finding Dismissed: Reconnaissance Keyword Match","locations":[{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":19,"line_start":19}],"confidence":0.91,"description":"The system reconnaissance alerts at SKILL.md lines 14 and 19 are false positives from audit checklist language. The file does not request host inspection or environment discovery.","confidence_reasoning":"The referenced lines discuss Firestore update and ownership checks. No commands such as whoami, uname, id, env, or filesystem enumeration are present."}],"dangerous_patterns":[],"files_scanned":1,"total_lines":45,"audit_model":"codex","audited_at":"2026-06-30T01:08:38.191+00:00","created_at":"2026-06-30T01:34:37.299694+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":3,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}