Deploy Firebase App Hosting Apps
Modern framework apps need App Hosting decisions, configuration, and Firebase CLI steps that are easy to mix up. This skill guides Claude, Codex, and Claude Code through deployment, secrets, emulation, and backend management.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "firebase-app-hosting-basics" from https://skillstore.io/skills/firebase-firebase-app-hosting-basics.md and its manifest at https://skillstore.io/api/skills/firebase-firebase-app-hosting-basics/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "firebase-app-hosting-basics". I have a Next.js app and want to deploy it with Firebase App Hosting.
Expected outcome:
The skill recommends App Hosting because the app can need server rendering. It outlines required configuration files, secret setup, billing prerequisites, and the final Firebase CLI deployment step.
Using "firebase-app-hosting-basics". My App Hosting app needs an API key during runtime.
Expected outcome:
The skill explains that the value should live in Cloud Secret Manager. It describes naming the environment variable, granting backend access, and avoiding committed local secret values.
Using "firebase-app-hosting-basics". I want to test App Hosting locally before release.
Expected outcome:
The skill describes using the Firebase Local Emulator Suite, optional emulator-specific overrides, and the default local App Hosting port for browser testing.
All static findings were adjudicated as false positives. The high env_access hits are placeholder API_KEY examples and Secret Manager guidance, while the external command hits are Markdown CLI examples rather than executable code. No evidence found for prompt injection, exfiltration intent, or hidden command execution.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/firebase-firebase-app-hosting-basics/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/firebase-firebase-app-hosting-basics?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/firebase-firebase-app-hosting-basics?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/firebase-firebase-app-hosting-basics/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/firebase-firebase-app-hosting-basics.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>firebase. (2026). firebase-app-hosting-basics security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/firebase-firebase-app-hosting-basics/audits/4@techreport{firebase-firebase-firebase-app-hosting-basics-2026,
author = {firebase},
title = {firebase-app-hosting-basics security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/firebase-firebase-app-hosting-basics/audits/4},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "firebase-app-hosting-basics security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "firebase"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/firebase-firebase-app-hosting-basics/audits/4"
identifiers:
- type: other
value: "skillstore:firebase-firebase-app-hosting-basics:audit:4"
description: "Skillstore immutable audit report identifier"
Plan and run an App Hosting deployment for a Next.js or Angular app that needs server rendering.
Set CPU, memory, scaling, concurrency, environment variables, and secrets for an App Hosting backend.
Compare Firebase Hosting, App Hosting source deployment, and GitHub-connected automated deployment.
Review my app type, framework, and rendering needs. Tell me whether Firebase Hosting or Firebase App Hosting is the better fit, and explain the deployment path.
Help me prepare firebase.json and apphosting.yaml for my app. Include backend ID, root directory, runtime resources, environment variables, and secret references.
Set up local App Hosting emulation for my project. Include emulator overrides, safe handling for local secret values, and checks I should run before deploying.
Design an App Hosting workflow connected to GitHub. Cover backend creation, rollout strategy, branch or commit selection, secrets, and rollback considerations.
Author
firebaseLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
30c73eac2afe762f6aa9c4553158769369d47351
Maintenance freshness
7/18/2026
Usage
2 downloads · 134 views
File structure
Audit Firestore Security Rules
Firestore rules often miss update bypasses, ownership checks, and validation gaps. This skill guides Claude, Codex, or Claude Code through a focused security review.
Integrate Firebase AI Logic in Apps
Adding Gemini features to Firebase apps requires platform-specific setup and production safeguards. This skill provides focused Firebase AI Logic guidance for web, mobile, and Flutter projects.
Audit Firebase Security Rules
Firestore rules can accidentally allow data leaks, role escalation, or unsafe updates. This skill guides Claude, Codex, and Claude Code through a focused review of access control and validation gaps.
Integrate Firebase AI Logic
Developers often need Firebase AI features without maintaining a separate backend. This skill guides setup, Gemini model usage, multimodal prompts, structured output, and production security for web apps.
Build Firestore Standard Apps Safely
Firestore setup can fail when rules, indexes, and SDK usage are planned separately. This skill helps Claude, Codex, and Claude Code create secure project files, validate access patterns, and guide Web SDK integration.
Build Genkit JS Apps
Genkit changes quickly, and outdated examples cause broken TypeScript flows. This skill guides setup, documentation lookup, examples, and troubleshooting for current Genkit JavaScript work.
Automate DevOps Pipelines and Deployments
by alirezarezvani
DevOps work often requires repeatable pipeline, infrastructure, and deployment patterns. This skill provides scripts and reference guides for CI/CD, IaC, deployment, and operations review.
Generate Kubernetes Manifests Safely
by sickn33
Kubernetes manifests are easy to misconfigure when teams write them from memory. This skill turns requirements into structured YAML guidance with security, probes, resources, and service patterns.
Coordinate DevOps Delivery
by Brownbull
DevOps work often spans pipelines, infrastructure, monitoring, and deployment decisions. This skill organizes those tasks into checklists, handoffs, and rollout plans.
Manage CloudBase From the CLI
by tencentcloudbase
CloudBase teams need repeatable command-line workflows for deployments and resource changes. This skill guides Claude, Codex, and Claude Code through tcb CLI tasks.
Build Fullstack Apps With Senior Guidance
by alirezarezvani
Fullstack projects often need consistent setup, architecture choices, and quality checks. This skill provides scripts and references for React, Next.js, Node.js, GraphQL, and PostgreSQL work.
Implement React View Transitions
by vercel-labs
React view transitions are easy to misplace, causing silent or noisy animations. This skill guides route, Suspense, list, and shared element animation choices.