firebase-gcp-debug

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Utilizes the firebase and gcloud command-line interfaces to perform administrative and debugging tasks, such as managing projects, starting emulators, and listing services.
  • [PROMPT_INJECTION]: Exhibits an attack surface for indirect prompt injection by interpreting log data from external sources.
  • Ingestion points: Processes output from gcloud logging read for Cloud Functions and Cloud Run (SKILL.md).
  • Boundary markers: Absent; the instructions do not implement delimiters or safety warnings to distinguish log content from agent instructions.
  • Capability inventory: Possesses the ability to execute shell commands and modify project configurations (SKILL.md).
  • Sanitization: Absent; no methods for escaping or validating external log content are defined.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 11:02 AM