firebase-messaging
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches official Firebase JavaScript SDKs from
gstatic.comto support web notifications. These are well-known resources provided by Google for Firebase integration. - [COMMAND_EXECUTION]: Provides standard Flutter package management commands (
flutter pub add) required to install thefirebase_messaginglibrary. - [SAFE]: No malicious patterns such as credential exfiltration, prompt injection, or obfuscation were detected. The code snippets follow official Firebase documentation best practices for handling foreground and background messages.
Audit Metadata