firebase-gcp-debug
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Utilizes the
firebaseandgcloudcommand-line interfaces to perform administrative and debugging tasks, such as managing projects, starting emulators, and listing services. - [PROMPT_INJECTION]: Exhibits an attack surface for indirect prompt injection by interpreting log data from external sources.
- Ingestion points: Processes output from
gcloud logging readfor Cloud Functions and Cloud Run (SKILL.md). - Boundary markers: Absent; the instructions do not implement delimiters or safety warnings to distinguish log content from agent instructions.
- Capability inventory: Possesses the ability to execute shell commands and modify project configurations (SKILL.md).
- Sanitization: Absent; no methods for escaping or validating external log content are defined.
Audit Metadata