firebase-local-env-setup
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs Node.js via NVM or official installers from nodejs.org.
- [EXTERNAL_DOWNLOADS]: Downloads the official Firebase CLI (firebase-tools) and agent skills from the author's verified repositories.
- [COMMAND_EXECUTION]: Executes shell commands to configure environment variables, source shell profiles, and manage global Node.js packages.
- [COMMAND_EXECUTION]: Automates the configuration of MCP server settings in agent-specific JSON files such as mcp_config.json.
- [REMOTE_CODE_EXECUTION]: Uses npx to dynamically execute the Firebase CLI and installs agent extensions directly from the author's GitHub repository.
- [PROMPT_INJECTION]: Includes a procedural constraint to ensure setup completion before proceeding with tasks, which does not constitute a safety bypass.
Audit Metadata