firebase-remote-config
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of
firebase_remote_configandfirebase_analyticsvia the Flutter package manager. These are official packages from Google, a well-known service. - [DATA_EXFILTRATION]: The skill explicitly warns against storing confidential data in Remote Config, as these parameters are accessible to the end users on the device.
- [PROMPT_INJECTION]: The skill facilitates fetching remote configuration data. 1. Ingestion points:
SKILL.md(viafetchAndActivateandonConfigUpdated). 2. Boundary markers: None. 3. Capability inventory: No dangerous capabilities (such as subprocess calls or file system modifications) are present. 4. Sanitization: Not demonstrated. The implementation follows standard Firebase integration patterns.
Audit Metadata