Skills extension-to-functions-codebase
📦

extension-to-functions-codebase

Content revision r1 Safe ⚙️ External commands

Migrate Firebase Extensions to Cloud Functions

Firebase Extension migrations require careful trigger, configuration, lifecycle, and packaging changes. This skill guides conversion to local Cloud Functions or reusable npm packages.

Supports: Claude Codex Code(CC)
📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "extension-to-functions-codebase" from https://skillstore.io/skills/firebase-extension-to-functions-codebase.md and its manifest at https://skillstore.io/api/skills/firebase-extension-to-functions-codebase/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/firebase-extension-to-functions-codebase.md Signed manifest GET /api/skills/firebase-extension-to-functions-codebase/manifest Signed lockfile GET /api/skills/firebase-extension-to-functions-codebase/lockfile

Test it

Using "extension-to-functions-codebase". Assess a Firestore extension with configuration parameters and an installation task.

Expected outcome:

The assessment identifies the Firestore trigger, parameter types, required IAM roles, installation lifecycle mapping, and tests needed before migration.

Using "extension-to-functions-codebase". Convert an extension into a local Cloud Functions codebase.

Expected outcome:

The result organizes V2 handlers under the functions source directory, maps configuration, preserves tests, and provides deployment guidance without deploying.

Using "extension-to-functions-codebase". Prepare an npm package migration for several legacy triggers.

Expected outcome:

The result defines package requirements, export behavior, trigger mappings, compatibility notes, configuration documentation, and validation steps without publishing.

Security Audit

Safe
v1 • 8/14/2026 Open versioned report

All 53 static findings are false positives. Backticks mark Markdown or TypeScript syntax, while configuration references provide migration guidance without reading secrets. No prompt injection, exfiltration intent, or other semantic security issue was found.

4
Files scanned
500
Lines analyzed
0
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (48)
references/destructuring-shim.md:26-28 references/destructuring-shim.md:38-40 SKILL.md:14 SKILL.md:28 SKILL.md:29 SKILL.md:34 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:46 SKILL.md:49 SKILL.md:50 SKILL.md:54 SKILL.md:55 SKILL.md:56-66 SKILL.md:66-71 SKILL.md:71-79 SKILL.md:79-80 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:83 SKILL.md:84 SKILL.md:85 SKILL.md:86-89 SKILL.md:89-91 SKILL.md:91 SKILL.md:92-93 SKILL.md:93-98 SKILL.md:98-99 SKILL.md:99-100 SKILL.md:100 SKILL.md:104 SKILL.md:105 SKILL.md:106-107 SKILL.md:107 SKILL.md:108-109 SKILL.md:109-110 SKILL.md:110-114 SKILL.md:114-116 SKILL.md:116 SKILL.md:117 SKILL.md:118-122 SKILL.md:122-124 SKILL.md:124-125 SKILL.md:125-126 SKILL.md:126-129
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/firebase-extension-to-functions-codebase/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/firebase-extension-to-functions-codebase/security.svg)](https://skillstore.io/skills/firebase-extension-to-functions-codebase?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/firebase-extension-to-functions-codebase?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/firebase-extension-to-functions-codebase/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/firebase-extension-to-functions-codebase.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

firebase. (2026). extension-to-functions-codebase security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/firebase-extension-to-functions-codebase/audits/1

BibTeX citation

@techreport{firebase-firebase-extension-to-functions-codebase-2026, author = {firebase}, title = {extension-to-functions-codebase security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/firebase-extension-to-functions-codebase/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "extension-to-functions-codebase security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "firebase" date-released: "2026-08-14" url: "https://skillstore.io/skills/firebase-extension-to-functions-codebase/audits/1" identifiers: - type: other value: "skillstore:firebase-extension-to-functions-codebase:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
45
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance

What You Can Build

Move an installed extension into an application

Convert extension resources and handlers into a local functions source tree for direct application ownership.

Create a reusable functions package

Prepare package metadata, exports, peer dependencies, documentation, and V2 function entry points for distribution.

Modernize legacy extension triggers

Map V1 triggers, runtime options, configuration, and lifecycle handlers to supported V2 APIs.

Try These Prompts

Assess a Firebase Extension 
Review this Firebase Extension and list its parameters, APIs, roles, lifecycle events, triggers, files, tests, and migration risks.
Build a local functions migration 
Convert this extension into a local functions source layout. Migrate supported triggers to V2 and document required configuration.
Prepare a reusable npm package 
Design a publishable package from this extension. Include exports, peer dependencies, lifecycle mappings, V2 handlers, and user documentation. Do not publish it.
Preserve complex legacy behavior 
Migrate this complex V1 extension to V2. Preserve handler logic with compatible destructuring, migrate secrets safely, and identify required tests.

Best Practices

  • Inventory every extension resource before editing handlers or package metadata.
  • Bind secrets explicitly and initialize dependent clients during onInit or through lazy getters.
  • Run type checks and tests for every migrated provider and trigger.

Avoid

  • Do not call parameter value methods during top-level module loading.
  • Do not assume every V2 provider supports the same compatibility destructuring.
  • Do not deploy functions or publish packages without explicit user review.

Frequently Asked Questions

What migration targets does this skill support?
It supports local Cloud Functions source integration and reusable npm package preparation.
Does the skill deploy migrated functions?
No. It can provide deployment guidance, but deployment remains a separate user-controlled action.
Does the skill publish npm packages?
No. The source instructions explicitly prohibit running npm publish.
How are legacy V1 handlers preserved?
Supported event providers can use documented destructuring patterns that expose legacy-compatible event properties.
How are secrets migrated?
Secret-like configuration values use secret parameters, explicit function bindings, and delayed initialization.
What validation is still required?
Run TypeScript checks, automated tests, emulator tests, and deployment review for the migrated project.

Developer Details

Author

firebase

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/firebase/agent-skills/tree/073edf7bb747c27b9c911a9126adaa5bc4648fdc/skills/extension-to-functions-codebase

Ref

227cbfef2ce562138f3a9d7baf8c2a2953c4ff79

Maintenance freshness

8/14/2026

Usage

0 downloads · 0 views

File structure

📁 references/

📄 configuration-migration.md

📄 destructuring-shim.md

📄 signature-mapping.md

📄 SKILL.md