firebase-firestore

"test.default"

Static analysis flagged 737 potential issues with a computed risk score of 100/100, but all findings are false positives from documentation code examples. The 615 external_commands detections are markdown code fences (```bash) and inline backticks in reference docs showing Firebase CLI commands like 'npx firebase-tools'. The 9 network detections are legitimate Firebase documentation URLs and placeholder project endpoints. Weak crypto, system reconnaissance, and certificate/key file detections all appear in security rules teaching examples and setup instructions. One critical heuristic finding combining code execution + network + credential patterns is expected in Firebase documentation that teaches CLI usage, API endpoints, and service account setup. The skill's inherent behaviors (instructing users to run Firebase CLI commands, referencing Firebase URLs) are core to its purpose as a Firestore setup and management guide. No malicious intent, no prompt injection, no data exfiltration patterns found.