firebase-development-add-feature
Add Firebase Features Safely
Adding Firebase features can break tests, rules, or authentication when project patterns are unclear. This skill guides a test-first workflow for Cloud Functions, Firestore collections, API endpoints, and emulator verification.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "firebase-development-add-feature" from https://skillstore.io/skills/2389-research-firebase-development-add-feature.md and its manifest at https://skillstore.io/api/skills/2389-research-firebase-development-add-feature/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "firebase-development-add-feature". Add an endpoint that creates a task for the signed-in user.
Expected outcome:
The assistant identifies the endpoint type, writes a failing test, adds the handler, checks authentication, updates exports, and verifies with unit and emulator tests.
Using "firebase-development-add-feature". Create a projectInvites collection that users can read but only functions can write.
Expected outcome:
The assistant proposes server-write-only rules, adds collection tests, checks indexes, and validates the workflow in the Firebase emulator.
Using "firebase-development-add-feature". Add a scheduled cleanup function for expired records.
Expected outcome:
The assistant creates a test plan, implements the scheduled handler, follows the response convention, and runs build and test verification.
Security Audit
SafeThe static findings are false positives caused by Markdown backticks, local command examples, a localhost emulator URL, a relative import, and ordinary test strings in SKILL.md. No prompt injection, credential access, data exfiltration, or unsafe filesystem behavior was found.
Risk Factors
⚙️ External commands (42)
🌐 Network access (2)
📁 Filesystem access (1)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/2389-research-firebase-development-add-feature/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/2389-research-firebase-development-add-feature?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/2389-research-firebase-development-add-feature?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/2389-research-firebase-development-add-feature/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/2389-research-firebase-development-add-feature.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
2389-research. (2026). firebase-development-add-feature security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/2389-research-firebase-development-add-feature/audits/9BibTeX citation
@techreport{2389-research-2389-research-firebase-development-add-feature-2026,
author = {2389-research},
title = {firebase-development-add-feature security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/2389-research-firebase-development-add-feature/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "firebase-development-add-feature security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "2389-research"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/2389-research-firebase-development-add-feature/audits/9"
identifiers:
- type: other
value: "skillstore:2389-research-firebase-development-add-feature:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: HighWhat You Can Build
Add a Cloud Function
Implement a new HTTP, callable, scheduled, or trigger-based function with tests and exports.
Create a Firestore Collection
Add a collection with security rules, indexes, validation, and emulator checks.
Extend an API Surface
Add an authenticated endpoint that follows the project response pattern and test conventions.
Try These Prompts
Add a Firebase Cloud Function that handles [task]. Follow the project patterns, write the failing test first, then implement it.
Create a Firestore collection for [entity]. Include security rules, indexes if needed, tests, and emulator verification.
Add an authenticated API endpoint for [operation]. Match the existing auth model and return the standard success or error response.
Implement [feature] across Cloud Functions and Firestore. Start with failing tests, update rules and indexes, then verify the full workflow in emulators.
Best Practices
- Write the failing unit test before changing implementation code.
- Match the existing project architecture, authentication model, and response convention.
- Verify rules and end-to-end behavior with Firebase emulators before marking work complete.
Avoid
- Adding Firestore writes without matching authentication and ownership rules.
- Skipping emulator tests after changing functions, rules, or indexes.
- Changing tests after implementation to hide a broken or incomplete feature.
Frequently Asked Questions
Does this skill create a new Firebase project?
Can it help with Firestore security rules?
Does it require test-first development?
Which Firebase features does it cover?
Does it verify work with emulators?
Is it a debugging skill?
Developer Details
Author
2389-researchLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Repository
https://github.com/2389-research/claude-plugins/tree/main/firebase-development/skills/add-featureRef
0519034dad657fb1f7706e0550e962beeda73fdf
Maintenance freshness
7/18/2026
Usage
7 downloads · 166 views
File structure
📄 SKILL.md