firebase-remote-config-basics
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads and executes the official
firebase-toolsCLI vianpxto manage Firebase project settings and Remote Config templates. - [EXTERNAL_DOWNLOADS]: References the official Firebase iOS SDK repository (
github.com/firebase/firebase-ios-sdk.git) for integration into iOS applications. - [COMMAND_EXECUTION]: Orchestrates the deployment of configuration templates and project management tasks using shell commands through the Firebase CLI.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with local project files such as
remote_config.json,google-services.json, and Xcode project files. - Ingestion points: Reads content from
remote_config.json,Info.plist, and.pbxprojto discover identifiers and modify configurations (SKILL.md, references/ios_setup.md). - Boundary markers: Includes a procedural boundary by requiring the agent to stop and request explicit user verification before deploying any modifications to the Remote Config template.
- Capability inventory: Possesses file write capabilities (creating
firebase.jsonand modifyingremote_config.json) and command execution capabilities vianpx firebase-tools(SKILL.md). - Sanitization: Relies on human-in-the-loop review for accuracy and safety of the generated configuration content.
Audit Metadata