Audit Firebase security rules

Get skill on GitHubRaw SKILL.md on GitHub

Opens the skill on GitHub

Source Firebase — firebase/agent-skills

Installnpx skills add firebase/agent-skills --skill firebase-security-rules-auditor

Submit a skill

Overview

This skill reviews the security rules for Firestore and Cloud Storage, looking for weak spots, red-team style. Its checklist covers privilege escalation, role bypasses, mismatched create and update logic, resource exhaustion, type checks, and size limits. Each rule set gets a score from 1 to 5.

Use cases

Alternatives

  • Add Firebase Authentication to an appThis skill guides adding Firebase Authentication to an app for user sign-in and account management. It covers users, identity providers, and tokens, then steps through provisioning, client setup, and security rules that limit data access by signed-in user.Coding agentFirebaseAuth
  • Azure ComplianceRuns Azure compliance and security audits with azqr and checks Key Vault secret expiration.Coding agentSecurityInfra
  • Cloudflare OneDesigns and troubleshoots Cloudflare One Zero Trust and SASE deployments.Coding agentSecurityInfra
  • CodeQLRuns CodeQL static analysis with interprocedural dataflow and taint tracking across major languages.Coding agentSecurityTesting
  • Mutation TestingConfigures mutation-testing campaigns and investigates surviving mutants for test gaps.Coding agentTestingSecurity