Skills firebase-app-hosting-basics

📦

firebase-app-hosting-basics

Name: firebase-app-hosting-basics
Author: firebase

Content revision r1 Safe 🌐 Network access🔑 Env variables⚙️ External commands

Deploy Firebase App Hosting Apps

Modern framework apps need App Hosting decisions, configuration, and Firebase CLI steps that are easy to mix up. This skill guides Claude, Codex, and Claude Code through deployment, secrets, emulation, and backend management.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "firebase-app-hosting-basics" from https://skillstore.io/skills/firebase-firebase-app-hosting-basics.md and its manifest at https://skillstore.io/api/skills/firebase-firebase-app-hosting-basics/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/firebase-firebase-app-hosting-basics.md Signed manifest GET /api/skills/firebase-firebase-app-hosting-basics/manifest Signed lockfile GET /api/skills/firebase-firebase-app-hosting-basics/lockfile

Test it

Using "firebase-app-hosting-basics". I have a Next.js app and want to deploy it with Firebase App Hosting.

Expected outcome:

The skill recommends App Hosting because the app can need server rendering. It outlines required configuration files, secret setup, billing prerequisites, and the final Firebase CLI deployment step.

Using "firebase-app-hosting-basics". My App Hosting app needs an API key during runtime.

Expected outcome:

The skill explains that the value should live in Cloud Secret Manager. It describes naming the environment variable, granting backend access, and avoiding committed local secret values.

Using "firebase-app-hosting-basics". I want to test App Hosting locally before release.

Expected outcome:

The skill describes using the Firebase Local Emulator Suite, optional emulator-specific overrides, and the default local App Hosting port for browser testing.

Security Audit

Safe

v4 • 7/5/2026 Open versioned report

All static findings were adjudicated as false positives. The high env_access hits are placeholder API_KEY examples and Secret Manager guidance, while the external command hits are Markdown CLI examples rather than executable code. No evidence found for prompt injection, exfiltration intent, or hidden command execution.

Files scanned

230

Lines analyzed

Review items

False positives ignored

Risk Factors

🌐 Network access (2)

references/configuration.md:50 SKILL.md:11

🔑 Env variables (2)

references/configuration.md:25 references/emulation.md:15

⚙️ External commands (5)

SKILL.md:30 SKILL.md:31-45 SKILL.md:45-46 SKILL.md:46-47 SKILL.md:47-48

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/firebase-firebase-app-hosting-basics/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/firebase-firebase-app-hosting-basics/security.svg)](https://skillstore.io/skills/firebase-firebase-app-hosting-basics?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/firebase-firebase-app-hosting-basics?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/firebase-firebase-app-hosting-basics/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/firebase-firebase-app-hosting-basics.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

firebase. (2026). firebase-app-hosting-basics security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/firebase-firebase-app-hosting-basics/audits/4

BibTeX citation

@techreport{firebase-firebase-firebase-app-hosting-basics-2026,
  author = {firebase},
  title = {firebase-app-hosting-basics security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/firebase-firebase-app-hosting-basics/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "firebase-app-hosting-basics security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "firebase"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/firebase-firebase-app-hosting-basics/audits/4"
identifiers:
  - type: other
    value: "skillstore:firebase-firebase-app-hosting-basics:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Deploy a Framework App

Plan and run an App Hosting deployment for a Next.js or Angular app that needs server rendering.

Tune Runtime Configuration

Set CPU, memory, scaling, concurrency, environment variables, and secrets for an App Hosting backend.

Choose a Hosting Workflow

Compare Firebase Hosting, App Hosting source deployment, and GitHub-connected automated deployment.

Try These Prompts

Choose the Hosting Option

Review my app type, framework, and rendering needs. Tell me whether Firebase Hosting or Firebase App Hosting is the better fit, and explain the deployment path.

Prepare App Hosting Files

Help me prepare firebase.json and apphosting.yaml for my app. Include backend ID, root directory, runtime resources, environment variables, and secret references.

Test Locally With Emulators

Set up local App Hosting emulation for my project. Include emulator overrides, safe handling for local secret values, and checks I should run before deploying.

Plan Automated Deployment

Design an App Hosting workflow connected to GitHub. Cover backend creation, rollout strategy, branch or commit selection, secrets, and rollback considerations.

Best Practices

Use Secret Manager references for sensitive values instead of committed plain text environment values.
Choose App Hosting when the app needs supported full-stack framework features such as SSR or ISR.
Validate configuration with the local emulator before deploying changes to production backends.

Avoid

Using App Hosting for a simple static site when Firebase Hosting is enough.
Committing emulator files that contain real API keys or other sensitive local values.
Running GitHub rollout commands when a project only needs direct Firebase CLI deployment.