Most static findings are Markdown formatting, Firebase SDK references, or official Firebase documentation links. Five Firebase CLI and npm command findings are confirmed because they can install external packages, enumerate Firebase account metadata, or change project configuration.
5
Files scanned
679
Lines analyzed
7
Review items
0
False positives ignored
Capability review items (5)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
The skill tells the agent to run npm install globally with the latest Firebase package. That can execute package installation scripts and modify the user environment.
The npx command downloads or runs firebase-tools@latest with automatic yes behavior and enumerates Firebase projects. It is legitimate setup guidance but still executes external tooling and accesses account metadata.
The npx command runs firebase-tools@latest and lists Firebase apps for the authenticated account. It is useful setup guidance but creates external command and account metadata exposure risk.
The init ailogic command can modify Firebase project configuration and enable services. It should require explicit user confirmation before any agent runs it.
> For all platforms (Flutter, Android, iOS, Web), you MUST run `npx firebase-tools init ailogic` to
The skill explicitly requires running a Firebase CLI initialization command. This is legitimate provisioning guidance, but it can change cloud project state and must be gated by user approval.
Most static findings are Markdown formatting, Firebase SDK references, or official Firebase documentation links. Five Firebase CLI and npm command findings are confirmed because they can install external packages, enumerate Firebase account metadata, or change project configuration.
5
Files scanned
679
Lines analyzed
7
Review items
0
False positives ignored
Capability review items (5)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
The skill tells the agent to run npm install globally with the latest Firebase package. That can execute package installation scripts and modify the user environment.
The npx command downloads or runs firebase-tools@latest with automatic yes behavior and enumerates Firebase projects. It is legitimate setup guidance but still executes external tooling and accesses account metadata.
The npx command runs firebase-tools@latest and lists Firebase apps for the authenticated account. It is useful setup guidance but creates external command and account metadata exposure risk.
The init ailogic command can modify Firebase project configuration and enable services. It should require explicit user confirmation before any agent runs it.
> For all platforms (Flutter, Android, iOS, Web), you MUST run `npx firebase-tools init ailogic` to
The skill explicitly requires running a Firebase CLI initialization command. This is legitimate provisioning guidance, but it can change cloud project state and must be gated by user approval.
Most static alerts are false positives caused by Markdown backticks, official Firebase documentation links, and language examples. The actionable risks are npm and npx Firebase CLI commands that install tooling, enumerate Firebase metadata, or provision AI Logic. I found no prompt injection or malicious exfiltration intent in the reviewed files.
5
Files scanned
679
Lines analyzed
7
Review items
0
False positives ignored
Capability review items (5)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
The skill instructs installing the latest Firebase package globally with npm. This performs network package installation and changes the user environment.
The npx command executes latest Firebase tooling and lists Firebase projects for the authenticated account. That can expose project metadata and should require consent.
The npx command runs Firebase tooling and enumerates apps in the selected project. It is legitimate setup work but still has account metadata exposure risk.
The command initializes AI Logic through Firebase tooling and can modify cloud project configuration. It should never run without explicit user approval.
> For all platforms (Flutter, Android, iOS, Web), you MUST run `npx firebase-tools init ailogic` to
The skill mandates running Firebase CLI initialization for all platforms. This can provision services in a Firebase project and needs explicit user confirmation.
Most static alerts are false positives caused by Markdown backticks, official Firebase documentation links, and language examples. The actionable risks are npm and npx Firebase CLI commands that install tooling, enumerate Firebase metadata, or provision AI Logic. I found no prompt injection or malicious exfiltration intent in the reviewed files.
5
Files scanned
679
Lines analyzed
7
Review items
0
False positives ignored
Capability review items (5)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
The skill instructs installing the latest Firebase package globally with npm. This performs network package installation and changes the user environment.
The npx command executes latest Firebase tooling and lists Firebase projects for the authenticated account. That can expose project metadata and should require consent.
The npx command runs Firebase tooling and enumerates apps in the selected project. It is legitimate setup work but still has account metadata exposure risk.
The command initializes AI Logic through Firebase tooling and can modify cloud project configuration. It should never run without explicit user approval.
> For all platforms (Flutter, Android, iOS, Web), you MUST run `npx firebase-tools init ailogic` to
The skill mandates running Firebase CLI initialization for all platforms. This can provision services in a Firebase project and needs explicit user confirmation.
AI review found the static findings are false positives caused by Markdown documentation, fenced code examples, and Firebase documentation links. The CLI commands are setup instructions for Firebase projects, the network references point to official Firebase documentation, and the weak cryptography matches are keyword collisions on Gemini API text. No prompt injection, data exfiltration, credential harvesting, or malicious execution path was found.
5
Files scanned
679
Lines analyzed
2
Review items
4
False positives ignored
Static false positives ignored (4)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Verdict: FALSE_POSITIVE. Static analysis flagged inline Markdown commands such as npm, npx, flutterfire, and SDK setup snippets. These are user-facing Firebase setup instructions, not hidden code that the skill executes.
The matched text appears inside Markdown documentation and fenced setup examples. No file contains Ruby code, shell wrappers, or an automatic execution path.
Verdict: FALSE_POSITIVE. Static analysis flagged hardcoded URLs, but they are links to Firebase documentation and release notes. They do not transmit local data or secrets.
The URLs point to firebase.google.com documentation and are presented as references. No network client, webhook, or exfiltration behavior is present.
Verdict: FALSE_POSITIVE. Static analysis flagged weak cryptography on lines that discuss Gemini API usage and a sample stock symbol. No MD5, SHA-1, encryption routine, or password hashing code was found.
Manual review found API documentation text and a function parameter example, not cryptographic implementation. The scanner likely matched short tokens in prose or sample identifiers.
Verdict: FALSE_POSITIVE. Review looked for override language, fake system messages, pre-approval claims, and requests to skip analysis. No evidence found in the reviewed files.
Targeted search and contextual review did not find instruction override text. The files contain product guidance, warnings, and SDK examples within the stated skill scope.
This skill contains official Firebase documentation for integrating AI Logic (Gemini API) into mobile and web apps. All 99 static findings are false positives: external_commands are CLI commands shown in documentation code blocks, network URLs link to Firebase docs, and weak cryptography/system reconnaissance flags are false matches on markdown content. The skill is from the official firebase/agent-skills repository with no malicious code, no data exfiltration, and no prompt injection attempts.