Waxell

plugin

firebase Review findings

Firebasefirebase/agent-skillsupdated

Official Claude plugin for Firebase. Manage projects, add backend services, develop AI features, deploy & host apps, and more
Firebase's own description, from the plugin's files.
Stars
499
Version
v1
Copies
0

Overview

holdReview findings

Waxell's checks found 5 findings to review, highest severity high.

Highest severity
high
Findings
5
What ran
Static analysis

A clean result means nothing alarming in what is published, not a guarantee. How the checks work

Skills in this plugin

We don't republish the plugin's instructions. Read them on GitHub at the reviewed commit.

Security

Security scan

Checked 2 days ago

Result

Review findings Waxell's checks found 5 findings to review, highest severity high.

Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work

Findings (5)

high · 4

  • high

    Tells Claude to install unpinned packages (firebase@latest)

    skills/firebase-ai-logic-basics/references/usage_patterns_web.md:8 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (firebase)

    skills/firebase-basics/references/web_setup.md:25 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (firebase)

    skills/firebase-data-connect-basics/reference/sdk_web.md:26 · skill_risk:S2

  • high

    Tells Claude to install unpinned packages (firebase-tools)

    skills/firebase-remote-config-basics/SKILL.md:34 · skill_risk:S2

medium · 1

  • medium

    firebase: runs third-party package firebase-tools@15.32.1

    .mcp.json · mcp_risk:M4

Versions

Version history

Each distinct content we have seen, newest first, with the verdict it got at the time.

One version so far: v1 (1.1.0), seen 2026-11-03.

Files

Files

117 files, 570 KB in total. Names only; open them on GitHub.

  • .agents/plugins/marketplace.json
  • .claude-plugin/marketplace.json
  • .claude-plugin/plugin.json
  • .codex-plugin/plugin.json
  • .cursor-plugin/plugin.json
  • .github/CODEOWNERS
  • .github/workflows/format.yml
  • .gitignore
  • .kimi-plugin/plugin.json
  • .mcp.json
  • CONTRIBUTING.md
  • FIREBASE.md
  • LICENSE
  • README.md
  • agents/firestore-rules-author.md
  • assets/firebase-agent-skills_logo.svg
  • assets/firebase_logo.svg
  • gemini-extension.json
  • kiro/POWER.md
  • kiro/mcp.json
  • scripts/format.py
  • scripts/format.sh
  • scripts/skill-token-counter/index.js
  • scripts/skill-token-counter/package-lock.json
  • scripts/skill-token-counter/package.json
  • skills/extension-to-functions-codebase/SKILL.md
  • skills/extension-to-functions-codebase/references/configuration-migration.md
  • skills/extension-to-functions-codebase/references/destructuring-shim.md
  • skills/extension-to-functions-codebase/references/signature-mapping.md
  • skills/firebase-ai-logic-basics/SKILL.md
  • skills/firebase-ai-logic-basics/references/flutter_setup.md
  • skills/firebase-ai-logic-basics/references/ios_setup.md
  • skills/firebase-ai-logic-basics/references/tts_generation.md
  • skills/firebase-ai-logic-basics/references/usage_patterns_android.md
  • skills/firebase-ai-logic-basics/references/usage_patterns_web.md
  • skills/firebase-analytics/SKILL.md
  • skills/firebase-analytics/references/android_screen_views.md
  • skills/firebase-analytics/references/android_setup.md
  • skills/firebase-analytics/references/ios_screen_views.md
  • skills/firebase-analytics/references/ios_setup.md
  • skills/firebase-app-hosting-basics/SKILL.md
  • skills/firebase-app-hosting-basics/references/configuration.md
  • skills/firebase-app-hosting-basics/references/emulation.md
  • skills/firebase-auth-basics/SKILL.md
  • skills/firebase-auth-basics/references/client_sdk_android.md
  • skills/firebase-auth-basics/references/client_sdk_web.md
  • skills/firebase-auth-basics/references/flutter_setup.md
  • skills/firebase-auth-basics/references/ios_setup.md
  • skills/firebase-auth-basics/references/security_rules.md
  • skills/firebase-basics/SKILL.md
  • skills/firebase-basics/references/android_setup.md
  • skills/firebase-basics/references/firebase-cli-guide.md
  • skills/firebase-basics/references/firebase-service-init.md
  • skills/firebase-basics/references/flutter_setup.md
  • skills/firebase-basics/references/ios_setup.md
  • skills/firebase-basics/references/local-env-setup.md
  • skills/firebase-basics/references/refresh/android_studio.md
  • skills/firebase-basics/references/refresh/antigravity.md
  • skills/firebase-basics/references/refresh/claude.md
  • skills/firebase-basics/references/refresh/gemini-cli.md
  • skills/firebase-basics/references/refresh/other-agents.md
  • skills/firebase-basics/references/setup/android_studio.md
  • skills/firebase-basics/references/setup/antigravity.md
  • skills/firebase-basics/references/setup/claude_code.md
  • skills/firebase-basics/references/setup/cursor.md
  • skills/firebase-basics/references/setup/gemini_cli.md
  • skills/firebase-basics/references/setup/github_copilot.md
  • skills/firebase-basics/references/setup/other_agents.md
  • skills/firebase-basics/references/web_setup.md
  • skills/firebase-crashlytics/SKILL.md
  • skills/firebase-crashlytics/references/android_setup.md
  • skills/firebase-crashlytics/references/ios_setup.md
  • skills/firebase-data-connect-basics/SKILL.md
  • skills/firebase-data-connect-basics/examples.md
  • skills/firebase-data-connect-basics/reference/cloud_functions.md
  • skills/firebase-data-connect-basics/reference/config.md
  • skills/firebase-data-connect-basics/reference/data_seeding.md
  • skills/firebase-data-connect-basics/reference/native_sql.md
  • skills/firebase-data-connect-basics/reference/operations.md
  • skills/firebase-data-connect-basics/reference/realtime.md
  • skills/firebase-data-connect-basics/reference/schema.md
  • skills/firebase-data-connect-basics/reference/sdk_admin_node.md
  • skills/firebase-data-connect-basics/reference/sdk_android.md
  • skills/firebase-data-connect-basics/reference/sdk_flutter.md
  • skills/firebase-data-connect-basics/reference/sdk_ios.md
  • skills/firebase-data-connect-basics/reference/sdk_web.md
  • skills/firebase-data-connect-basics/reference/search.md
  • skills/firebase-data-connect-basics/reference/security.md
  • skills/firebase-data-connect-basics/templates.md
  • skills/firebase-firestore/SKILL.md
  • skills/firebase-firestore/references/enterprise/android_sdk_usage.md
  • skills/firebase-firestore/references/enterprise/data_model.md
  • skills/firebase-firestore/references/enterprise/flutter_setup.md
  • skills/firebase-firestore/references/enterprise/indexes.md
  • skills/firebase-firestore/references/enterprise/ios_setup.md
  • skills/firebase-firestore/references/enterprise/provisioning.md
  • skills/firebase-firestore/references/enterprise/python_sdk_usage.md
  • skills/firebase-firestore/references/enterprise/web_sdk_usage.md
  • skills/firebase-firestore/references/standard/android_sdk_usage.md
  • skills/firebase-firestore/references/standard/flutter_setup.md
  • skills/firebase-firestore/references/standard/indexes.md
  • skills/firebase-firestore/references/standard/ios_setup.md
  • skills/firebase-firestore/references/standard/provisioning.md
  • skills/firebase-firestore/references/standard/web_sdk_usage.md
  • skills/firebase-hosting-basics/SKILL.md
  • skills/firebase-hosting-basics/references/configuration.md
  • skills/firebase-hosting-basics/references/deploying.md
  • skills/firebase-remote-config-basics/SKILL.md
  • skills/firebase-remote-config-basics/references/android_setup.md
  • skills/firebase-remote-config-basics/references/ios_setup.md
  • skills/firebase-security-rules-auditor/SKILL.md
  • skills/firestore-rules-creation/SKILL.md
  • skills/xcode-project-setup/SKILL.md
  • skills/xcode-project-setup/scripts/xcode_spm_setup/.gitignore
  • skills/xcode-project-setup/scripts/xcode_spm_setup/Package.resolved
  • skills/xcode-project-setup/scripts/xcode_spm_setup/Package.swift
  • skills/xcode-project-setup/scripts/xcode_spm_setup/Sources/main.swift

See and control which skills your people use

Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.

30 minutes. No commitment.

SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF

More engineering skills and plugins

See all