Skills firebase-ai-logic

📦

firebase-ai-logic

Name: firebase-ai-logic
Author: firebase

v1.0.0 Content revision r1 Safe ⚙️ External commands🌐 Network access

Integrate Firebase AI Logic

Developers often need Firebase AI features without maintaining a separate backend. This skill guides setup, Gemini model usage, multimodal prompts, structured output, and production security for web apps.

Supports: Claude Codex Code(CC)

📊 76 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "firebase-ai-logic" from https://skillstore.io/skills/firebase-firebase-ai-logic.md and its manifest at https://skillstore.io/api/skills/firebase-firebase-ai-logic/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/firebase-firebase-ai-logic.md Signed manifest GET /api/skills/firebase-firebase-ai-logic/manifest Signed lockfile GET /api/skills/firebase-firebase-ai-logic/lockfile

Test it

Using "firebase-ai-logic". Set up Firebase AI Logic for a web prototype.

Expected outcome:

Provider recommendation with rationale.
Prerequisite checklist.
Setup sequence with user confirmation points.
Links to relevant Firebase documentation.

Using "firebase-ai-logic". Plan a multimodal image caption feature.

Expected outcome:

A workflow covering file handling, MIME type checks, Gemini prompt design, and response display considerations.

Using "firebase-ai-logic". Prepare for production launch.

Expected outcome:

App Check readiness notes.
Remote Config model update plan.
Quota and billing risk checklist.

Security Audit

Safe

v6 • 7/9/2026 Open versioned report

Most detections are documentation snippets, Firebase SDK method names, or Firebase documentation URLs and are false positives. Four setup commands are confirmed medium-risk external command guidance because they install or run latest npm packages and can change Firebase project state. No evidence of prompt injection, credential exfiltration, or malicious intent was found.

Files scanned

285

Lines analyzed

Review items

False positives ignored

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:31

Ruby/shell backtick execution

`npm install -g firebase@latest`

The skill instructs users or agents to run a global npm install for the latest Firebase CLI. This is legitimate setup guidance, but it downloads and installs executable code from the network.

Medium

SKILL.md:35

Ruby/shell backtick execution

`npx -y firebase-tools@latest projects:list`

The skill recommends an npx command that runs firebase-tools@latest with automatic yes behavior. This executes remote npm package code and queries Firebase project metadata.

Medium

SKILL.md:39

Ruby/shell backtick execution

`npx -y firebase-tools@latest apps:list`

The skill recommends an npx command that runs firebase-tools@latest to list Firebase apps. It is useful setup guidance but still executes external package code.

Medium

SKILL.md:43

Ruby/shell backtick execution

`npx -y firebase-tools@latest init # Choose AI logic`

The skill recommends running firebase-tools init through npx with latest package resolution. That command can modify the project and enable Firebase services, so it needs user confirmation.

Risk Factors

⚙️ External commands (10)

references/usage_patterns_web.md:32-34 references/usage_patterns_web.md:120-132 references/usage_patterns_web.md:132-145 SKILL.md:31 SKILL.md:35 SKILL.md:39 SKILL.md:43 SKILL.md:59 SKILL.md:63 SKILL.md:94

🌐 Network access (5)

SKILL.md:25 SKILL.md:47 SKILL.md:84 SKILL.md:90 SKILL.md:94

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/firebase-firebase-ai-logic/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/firebase-firebase-ai-logic/security.svg)](https://skillstore.io/skills/firebase-firebase-ai-logic?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/firebase-firebase-ai-logic?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/firebase-firebase-ai-logic/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/firebase-firebase-ai-logic.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

firebase. (2026). firebase-ai-logic security audit report (audit version 6) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/firebase-firebase-ai-logic/audits/6

BibTeX citation

@techreport{firebase-firebase-firebase-ai-logic-2026,
  author = {firebase},
  title = {firebase-ai-logic security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/firebase-firebase-ai-logic/audits/6},
  note = {Author version 1.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "firebase-ai-logic security audit report (audit version 6)"
version: "1.0.0"
type: report
authors:
  - name: "firebase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/firebase-firebase-ai-logic/audits/6"
identifiers:
  - type: other
    value: "skillstore:firebase-firebase-ai-logic:audit:6"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

supercent-io Recommended

supercent-io-firebase-ai-logic

Skillstore Score 78

Evidence Confidence High

Skillstore usage 11

Updated

2026-08-21

firebase Current

firebase-firebase-ai-logic

Skillstore Score 76

Evidence Confidence High

Skillstore usage 7

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Add Gemini text features

A web developer can initialize Firebase AI Logic and call Gemini for text generation.

Plan multimodal workflows

A product engineer can map image, audio, video, and PDF inputs to Firebase AI Logic patterns.

Prepare production controls

A Firebase lead can review App Check, model configuration, and provider selection before launch.

Try These Prompts

Set up Firebase AI Logic

Help me add Firebase AI Logic to a web app. Check prerequisites, explain provider choice, and list the safest setup steps.

Add multimodal input

Guide me through accepting an image file in a web app and sending it to Gemini with Firebase AI Logic.

Stream chat responses

Design a chat flow using startChat and streaming responses. Include state handling, loading states, and error handling.

Harden a production launch

Review my Firebase AI Logic launch plan. Focus on App Check, Remote Config model selection, quota protection, and billing risks.

Best Practices

Ask before running npm or Firebase CLI commands, especially global installs.
Enable Firebase App Check before exposing AI calls in production clients.
Use Remote Config for model names when teams need controlled updates.

Avoid

Running npx commands with automatic yes flags without user approval.
Hardcoding model versions across client releases without an update path.
Sending large files inline when Cloud Storage URLs are more appropriate.

Frequently Asked Questions

Does this skill create a Firebase project?

No. It explains setup steps and command options, but project creation still needs authorized user action.

Which provider does it recommend by default?

It recommends Gemini Developer API by default and Vertex AI Gemini API when scale or enterprise requirements need it.

Does it support mobile platforms?

It lists Android, iOS, Flutter, Unity, and web support, but the included usage patterns focus on web.

Can it help with structured output?

Yes. It describes response schemas and JSON response handling for Firebase AI Logic.

What security controls are covered?

It covers App Check for quota protection and Remote Config for safer model version updates.

Are external commands required?

Some setup guidance uses npm and Firebase CLI commands. Users should review and approve them before execution.

Developer Details

Author

firebase

License

MIT

Author version

v1.0.0

Skillstore revision

Repository

https://github.com/firebase/agent-skills/tree/main/skills/firebase-ai-logic-basics/

Ref

0519034dad657fb1f7706e0550e962beeda73fdf

Maintenance freshness

7/18/2026

Usage

2 downloads · 96 views

File structure

📁 references/

📄 usage_patterns_web.md

📄 SKILL.md