angular-fire

Warn

Audited by Socket on Feb 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

[Skill Scanner] Backtick command substitution detected All findings: [HIGH] command_injection: Backtick command substitution detected (CI003) [AITech 9.1.4] [HIGH] command_injection: Backtick command substitution detected (CI003) [AITech 9.1.4] No evidence of malicious behavior in the provided skill files. The code and instructions align with the declared purpose (Angular + @angular/fire patterns). The only security concern is operational: the examples assume properly configured Firebase security rules and correct domain validation. If developers follow the provided checklist and configure rules, the code is safe for its intended use.

Confidence: 80%Severity: 75%
Audit Metadata
Analyzed At
Feb 15, 2026, 10:11 PM
Package URL
pkg:socket/skills-sh/7spade%2Fblack-tortoise%2Fangular-fire%2F@960e419c094911dd752d61ac4d7831c1b498187b