firebase-messaging
Fail
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill content is coherent with its stated purpose of integrating FCM into Flutter apps. It relies on official Firebase Flutter/Dart SDKs and standard platform configuration steps. Data flows align with typical push notification architecture, with token management and message reception handled through Firebase services rather than any external, untrusted intermediaries. No evident credential harvesting, data exfiltration, or dangerous supply-chain patterns are present. Overall assessment: BENIGN with normal security considerations (keep dependencies up-to-date, review permission handling, and secure APNs/FCM configurations).
Confidence: 98%
Audit Metadata