Skills firebase-firestore-enterprise-native-mode

📦

firebase-firestore-enterprise-native-mode

Name: firebase-firestore-enterprise-native-mode
Author: firebase

Content revision r1 Safe ⚙️ External commands🌐 Network access

Build Firestore Enterprise Native Mode Apps

Firestore Enterprise Native Mode setup requires careful provisioning, rules, indexes, and SDK choices. This skill gives Claude, Codex, and Claude Code focused guidance for secure Firebase implementation.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "firebase-firestore-enterprise-native-mode" from https://skillstore.io/skills/firebase-firebase-firestore-enterprise-native-mode.md and its manifest at https://skillstore.io/api/skills/firebase-firebase-firestore-enterprise-native-mode/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/firebase-firebase-firestore-enterprise-native-mode.md Signed manifest GET /api/skills/firebase-firebase-firestore-enterprise-native-mode/manifest Signed lockfile GET /api/skills/firebase-firebase-firestore-enterprise-native-mode/lockfile

Test it

Using "firebase-firestore-enterprise-native-mode". I need a locked-down starting point for a new Firestore Enterprise app.

Expected outcome:

A setup plan with Firebase files, a default-deny rules approach, deployment commands to review, and validation next steps.

Using "firebase-firestore-enterprise-native-mode". My users collection stores email and display names. Can profiles be public?

Expected outcome:

A security recommendation to separate private user data from public profile data and restrict private reads to the owner.

Using "firebase-firestore-enterprise-native-mode". These queries filter by status and sort by created time.

Expected outcome:

An index plan that identifies required fields, ordering direction, query scope, and deployment considerations.

Security Audit

Safe

v4 • 7/5/2026 Open versioned report

AI review found the static alerts are documentation and syntax false positives. The apparent shell substitutions are Firestore path interpolation, key references are map key helpers, and the URL pattern is format validation. No prompt-injection attempt, credential exposure, malicious command execution, or data-exfiltration intent was found.

Files scanned

1,042

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (6)

references/security_rules.md:336 references/security_rules.md:337 references/security_rules.md:340 references/security_rules.md:341 references/web_sdk_usage.md:196-201 SKILL.md:4

🌐 Network access (1)

references/security_rules.md:117

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/firebase-firebase-firestore-enterprise-native-mode/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/firebase-firebase-firestore-enterprise-native-mode/security.svg)](https://skillstore.io/skills/firebase-firebase-firestore-enterprise-native-mode?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/firebase-firebase-firestore-enterprise-native-mode?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/firebase-firebase-firestore-enterprise-native-mode/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/firebase-firebase-firestore-enterprise-native-mode.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

firebase. (2026). firebase-firestore-enterprise-native-mode security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/firebase-firebase-firestore-enterprise-native-mode/audits/4

BibTeX citation

@techreport{firebase-firebase-firebase-firestore-enterprise-native-mode-2026,
  author = {firebase},
  title = {firebase-firestore-enterprise-native-mode security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/firebase-firebase-firestore-enterprise-native-mode/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "firebase-firestore-enterprise-native-mode security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "firebase"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/firebase-firebase-firestore-enterprise-native-mode/audits/4"
identifiers:
  - type: other
    value: "skillstore:firebase-firebase-firestore-enterprise-native-mode:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Provision an Enterprise Database

Create the local Firebase files and CLI plan needed for a Firestore Enterprise Native Mode database.

Harden Firestore Rules

Generate owner checks, schema validation, immutable fields, and attack tests for sensitive application data.

Plan Queries and Indexes

Map SDK query patterns to required Firestore Enterprise index definitions and deployment steps.

Try These Prompts

Set Up My Database

Help me set up Firestore Enterprise Native Mode for my Firebase project. List the files I need and the commands I should review.

Create Secure Rules

Generate prototype Firestore Security Rules for these collections, fields, auth roles, and queries. Include validation and ownership checks.

Review Rule Weaknesses

Review my Firestore rules for bypasses, PII leaks, role escalation, missing update validation, and unsafe public reads.

Optimize Query Indexes

Analyze these Firestore queries and propose the required dense, sparse, composite, or unique indexes for Enterprise Native Mode.

Best Practices

Start with default-deny rules and add the minimum required access for each collection.
Validate create and update operations with the same schema and ownership requirements.
Test generated rules against abuse cases before sharing production data widely.

Avoid

Do not make a users collection publicly readable when it contains private fields.
Do not rely on ownership checks without validating all updated fields.
Do not deploy indexes or rules without reviewing the affected Firebase project.