Versioned security assessment

Report ID: SA-0519034D

7/9/2026, 12:43:13 PM

firebase-ai-logic-basics security assessment v6

Skill Security Certification Report

Audit History
Audit model: codex Latest published report
Skill name
firebase-ai-logic-basics
Version
v1.0.1
Maintainer
firebase
Source
github.com/firebase/agent-skills/tree/main/skills/firebase-ai-logic-basics/
Coverage
5 Files scanned · 679 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static findings are Markdown formatting, Firebase SDK references, or official Firebase documentation links. Five Firebase CLI and npm command findings are confirmed because they can install external packages, enumerate Firebase account metadata, or change project configuration.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

5 Files scanned · 679 Lines analyzed

5 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 6 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 11 evidence locations

Capability review items (5)
Medium
SKILL.md:31
Ruby/shell backtick execution
`npm install -g firebase@latest`
The skill tells the agent to run npm install globally with the latest Firebase package. That can execute package installation scripts and modify the user environment.
Medium
SKILL.md:35
Ruby/shell backtick execution
`npx -y firebase-tools@latest projects:list`
The npx command downloads or runs firebase-tools@latest with automatic yes behavior and enumerates Firebase projects. It is legitimate setup guidance but still executes external tooling and accesses account metadata.
Medium
SKILL.md:39
Ruby/shell backtick execution
`npx -y firebase-tools@latest apps:list`
The npx command runs firebase-tools@latest and lists Firebase apps for the authenticated account. It is useful setup guidance but creates external command and account metadata exposure risk.
Medium
SKILL.md:43
Ruby/shell backtick execution
`npx -y firebase-tools@latest init ailogic`
The init ailogic command can modify Firebase project configuration and enable services. It should require explicit user confirmation before any agent runs it.
Medium
SKILL.md:102
Ruby/shell backtick execution
> For all platforms (Flutter, Android, iOS, Web), you MUST run `npx firebase-tools init ailogic` to
The skill explicitly requires running a Firebase CLI initialization command. This is legitimate provisioning guidance, but it can change cloud project state and must be gated by user approval.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Medium
    Unpinned Firebase CLI package execution
    Pin firebase-tools to a reviewed version or ask the user before running latest npm or npx commands.
  2. FIX-002
    Medium
    Global package installation guidance
    Prefer a project-local dev dependency or document the global install as an optional manual step.
  3. FIX-003
    Medium
    Firebase project enumeration and provisioning commands
    Require explicit confirmation and show the selected project before running projects:list, apps:list, or init ailogic.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
0519034dad657fb1f7706e0550e962beeda73fdf
Content hash
da8cd253b9b128d0402cee62604ec9c804721752706b95d8aaff9785dc487d0b
Tree hash
462b2e2ebfe6512c07a0a23b13c7016286bc56f1ed9ee72bbe62127b6b4436c6
Skill path
skills/firebase/firebase-ai-logic-basics
Audit payload hash
87aee4ea8d39be462e48563d0ef807d9

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable