firestore-security-rules-auditor
78Audit Firestore Security Rules
Firestore rules often miss update bypasses, ownership checks, and validation gaps. This skill guides Claude, Codex, or Claude Code through a focused security review.
Integrate Firebase AI Logic
Developers often need Firebase AI features without maintaining a separate backend. This skill guides setup, Gemini model usage, multimodal prompts, structured output, and production security for web apps.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "firebase-ai-logic" from https://skillstore.io/skills/firebase-firebase-ai-logic.md and its manifest at https://skillstore.io/api/skills/firebase-firebase-ai-logic/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "firebase-ai-logic". Set up Firebase AI Logic for a web prototype.
Expected outcome:
Using "firebase-ai-logic". Plan a multimodal image caption feature.
Expected outcome:
A workflow covering file handling, MIME type checks, Gemini prompt design, and response display considerations.
Using "firebase-ai-logic". Prepare for production launch.
Expected outcome:
Most detections are documentation snippets, Firebase SDK method names, or Firebase documentation URLs and are false positives. Four setup commands are confirmed medium-risk external command guidance because they install or run latest npm packages and can change Firebase project state. No evidence of prompt injection, credential exfiltration, or malicious intent was found.
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/firebase-firebase-ai-logic/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/firebase-firebase-ai-logic?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/firebase-firebase-ai-logic?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/firebase-firebase-ai-logic/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/firebase-firebase-ai-logic.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>firebase. (2026). firebase-ai-logic security audit report (audit version 6) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/firebase-firebase-ai-logic/audits/6@techreport{firebase-firebase-firebase-ai-logic-2026,
author = {firebase},
title = {firebase-ai-logic security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/firebase-firebase-ai-logic/audits/6},
note = {Author version 1.0.0}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "firebase-ai-logic security audit report (audit version 6)"
version: "1.0.0"
type: report
authors:
- name: "firebase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/firebase-firebase-ai-logic/audits/6"
identifiers:
- type: other
value: "skillstore:firebase-firebase-ai-logic:audit:6"
description: "Skillstore immutable audit report identifier"
Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
supercent-io-firebase-ai-logic
2026-09-09
firebase-firebase-ai-logic
2026-09-09
A web developer can initialize Firebase AI Logic and call Gemini for text generation.
A product engineer can map image, audio, video, and PDF inputs to Firebase AI Logic patterns.
A Firebase lead can review App Check, model configuration, and provider selection before launch.
Help me add Firebase AI Logic to a web app. Check prerequisites, explain provider choice, and list the safest setup steps.
Guide me through accepting an image file in a web app and sending it to Gemini with Firebase AI Logic.
Design a chat flow using startChat and streaming responses. Include state handling, loading states, and error handling.
Review my Firebase AI Logic launch plan. Focus on App Check, Remote Config model selection, quota protection, and billing risks.
Author
firebaseLicense
MIT
Author version
v1.0.0
Skillstore revision
r1
Ref
0519034dad657fb1f7706e0550e962beeda73fdf
Maintenance freshness
7/18/2026
Usage
2 downloads ยท 96 views
File structure
Audit Firestore Security Rules
Firestore rules often miss update bypasses, ownership checks, and validation gaps. This skill guides Claude, Codex, or Claude Code through a focused security review.
Integrate Firebase AI Logic in Apps
Adding Gemini features to Firebase apps requires platform-specific setup and production safeguards. This skill provides focused Firebase AI Logic guidance for web, mobile, and Flutter projects.
Audit Firebase Security Rules
Firestore rules can accidentally allow data leaks, role escalation, or unsafe updates. This skill guides Claude, Codex, and Claude Code through a focused review of access control and validation gaps.
Build Firestore Standard Apps Safely
Firestore setup can fail when rules, indexes, and SDK usage are planned separately. This skill helps Claude, Codex, and Claude Code create secure project files, validate access patterns, and guide Web SDK integration.
Build Genkit JS Apps
Genkit changes quickly, and outdated examples cause broken TypeScript flows. This skill guides setup, documentation lookup, examples, and troubleshooting for current Genkit JavaScript work.
Deploy Firebase Hosting Sites
Firebase Hosting setup can be confusing when choosing between classic Hosting, App Hosting, and deployment channels. This skill guides agents through configuration, local emulation, preview channels, and safe releases for static sites, SPAs, and simple services.
Manage CloudBase Web Storage
by tencentcloudbase
Browser storage workflows can fail when buckets, domains, or access rules are incomplete. This skill guides CloudBase Web SDK uploads, downloads, temporary URLs, and environment checks.
Add Firebase Features Safely
by 2389-research
Adding Firebase features can break tests, rules, or authentication when project patterns are unclear. This skill guides a test-first workflow for Cloud Functions, Firestore collections, API endpoints, and emulator verification.
Build Secure Firebase Backends
by sickn33
Firebase simplifies backend development, but weak rules and inefficient data models create security and cost risks. This skill provides practical patterns for secure, scalable Firebase applications.
Build Firebase Genkit AI Workflows
by supercent-io
Developers need clear patterns for production AI flows, agents, RAG, and deployment. This skill provides Genkit setup, examples, commands, and deployment guidance for Firebase and Cloud Run.
Build Firebase Projects With Safer Workflows
by 2389-research
Firebase work spans setup, functions, Firestore rules, emulators, and deployment checks. This skill provides routed workflows for setup, feature work, debugging, and validation.
Build Reliable Gemini API Applications
by sickn33
Gemini API projects can fail when model names, SDKs, and documentation paths change. This skill provides focused guidance for SDK setup, model selection, examples, and official references.