firebase-app-hosting-basics
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx -y firebase-tools@latestto download and run the official Firebase CLI. Since Firebase is the skill author and this is their official package, this is considered a safe and standard dependency for project management. - [COMMAND_EXECUTION]: The skill documentation provides numerous commands for the Firebase CLI to manage backends, rollouts, and deployment. These include
apphosting:backends:deleteanddeploy, which are standard capabilities for managing Firebase App Hosting resources. - [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read and process project files such as
firebase.json,apphosting.yaml, andapphosting.emulator.yaml. This creates a surface for indirect prompt injection if an attacker-controlled repository contains malicious instructions within these configuration files. - Ingestion points: Project configuration files (
firebase.json,apphosting.yaml,apphosting.emulator.yaml) in the local project directory. - Boundary markers: None mentioned in the instructions for parsing these files.
- Capability inventory: Resource deployment, backend management, and secret configuration using the
firebase-toolsCLI. - Sanitization: None described for the data read from project configuration files.
Audit Metadata