firebase-app-hosting-basics
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard Firebase CLI tools to manage application deployment and configuration.
- Evidence: Commands such as
firebase deploy,firebase init apphosting, andfirebase apphosting:backends:createare referenced throughout the documentation. - Context: These are official command-line utilities provided by the trusted vendor 'firebase'.
- [EXTERNAL_DOWNLOADS]: The skill directs users to official Firebase project management consoles.
- Evidence: References to
console.firebase.google.comare found inSKILL.mdfor project upgrades and management. - Context: This is a well-known, trusted domain belonging to the platform provider.
- [CREDENTIALS_UNSAFE]: The skill demonstrates how to securely handle sensitive information using official secret management workflows.
- Evidence: The skill guides the use of
firebase apphosting:secrets:setand describes referencing secrets inapphosting.yamlinstead of hardcoding values. - Context: Documentation uses safe placeholders (e.g., "local-dev-api-key") or refers to secret identifiers in Cloud Secret Manager, which is a recommended security practice.
Audit Metadata