Official Claude plugin for Firebase. Manage projects, add backend services, develop AI features, deploy & host apps, and more
- Stars
- 499
- Version
- v1
- Copies
- 0
Overview
Waxell's checks found 5 findings to review, highest severity high.
- Highest severity
- high
- Findings
- 5
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
Skills in this plugin
extension-to-functions-codebaseFirebaseSkill for converting an installed Firebase Extension (or extension source) into a standalone Cloud Functions for Firebase codebase or… No issuesEngineeringSecurity499
firebase-ai-logic-basicsFirebaseIntegrates Firebase AI Logic (formerly Vertex AI for Firebase) into mobile and web apps (Android, iOS, Web, and Flutter) to call Gemini… Review findingsEngineeringResearch499
firebase-analyticsFirebaseComprehensive guide for Google Analytics for Firebase (GA4F), including base setup, SDK initialization, screen tracking, and event logging… No issuesData & analyticsEngineering499
firebase-app-hosting-basicsFirebaseDeploys and manages full-stack web applications (Next.js, Angular) with Server-Side Rendering (SSR) using Firebase App Hosting. Use when… No issuesEngineeringSecurity499
firebase-auth-basicsFirebaseGuide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or… No issuesSecurityData & analytics499
firebase-basicsFirebaseProvides foundational Firebase CLI setup, CLI installation, version checks (`firebase-tools@latest --version`), CLI login (including… Review findingsEngineeringData & analytics499
firebase-crashlyticsFirebaseComprehensive guide for Firebase Crashlytics, including provisioning and SDK usage. Use this skill when the user needs help setting up… No issuesDocumentsEngineering499
firebase-data-connectFirebaseBuilds and deploys Firebase SQL Connect (aka Firebase Data Connect) backends with PostgreSQL securely. Use when designing schemas with… Review findingsData & analyticsDesign499
firebase-firestoreFirebaseSets up, manages, queries, and configures Cloud Firestore databases (Standard/Enterprise edition), including data modeling, security… No issuesData & analyticsEngineering499
We don't republish the plugin's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
Review findings Waxell's checks found 5 findings to review, highest severity high.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (5)
high · 4
- high
Tells Claude to install unpinned packages (firebase@latest)
skills/firebase-ai-logic-basics/references/usage_patterns_web.md:8 · skill_risk:S2
- high
Tells Claude to install unpinned packages (firebase)
skills/firebase-basics/references/web_setup.md:25 · skill_risk:S2
- high
Tells Claude to install unpinned packages (firebase)
skills/firebase-data-connect-basics/reference/sdk_web.md:26 · skill_risk:S2
- high
Tells Claude to install unpinned packages (firebase-tools)
skills/firebase-remote-config-basics/SKILL.md:34 · skill_risk:S2
medium · 1
- medium
firebase: runs third-party package firebase-tools@15.32.1
.mcp.json · mcp_risk:M4
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1 (1.1.0), seen 2026-11-03.
Files
Files
117 files, 570 KB in total. Names only; open them on GitHub.
- .agents/plugins/marketplace.json
- .claude-plugin/marketplace.json
- .claude-plugin/plugin.json
- .codex-plugin/plugin.json
- .cursor-plugin/plugin.json
- .github/CODEOWNERS
- .github/workflows/format.yml
- .gitignore
- .kimi-plugin/plugin.json
- .mcp.json
- CONTRIBUTING.md
- FIREBASE.md
- LICENSE
- README.md
- agents/firestore-rules-author.md
- assets/firebase-agent-skills_logo.svg
- assets/firebase_logo.svg
- gemini-extension.json
- kiro/POWER.md
- kiro/mcp.json
- scripts/format.py
- scripts/format.sh
- scripts/skill-token-counter/index.js
- scripts/skill-token-counter/package-lock.json
- scripts/skill-token-counter/package.json
- skills/extension-to-functions-codebase/SKILL.md
- skills/extension-to-functions-codebase/references/configuration-migration.md
- skills/extension-to-functions-codebase/references/destructuring-shim.md
- skills/extension-to-functions-codebase/references/signature-mapping.md
- skills/firebase-ai-logic-basics/SKILL.md
- skills/firebase-ai-logic-basics/references/flutter_setup.md
- skills/firebase-ai-logic-basics/references/ios_setup.md
- skills/firebase-ai-logic-basics/references/tts_generation.md
- skills/firebase-ai-logic-basics/references/usage_patterns_android.md
- skills/firebase-ai-logic-basics/references/usage_patterns_web.md
- skills/firebase-analytics/SKILL.md
- skills/firebase-analytics/references/android_screen_views.md
- skills/firebase-analytics/references/android_setup.md
- skills/firebase-analytics/references/ios_screen_views.md
- skills/firebase-analytics/references/ios_setup.md
- skills/firebase-app-hosting-basics/SKILL.md
- skills/firebase-app-hosting-basics/references/configuration.md
- skills/firebase-app-hosting-basics/references/emulation.md
- skills/firebase-auth-basics/SKILL.md
- skills/firebase-auth-basics/references/client_sdk_android.md
- skills/firebase-auth-basics/references/client_sdk_web.md
- skills/firebase-auth-basics/references/flutter_setup.md
- skills/firebase-auth-basics/references/ios_setup.md
- skills/firebase-auth-basics/references/security_rules.md
- skills/firebase-basics/SKILL.md
- skills/firebase-basics/references/android_setup.md
- skills/firebase-basics/references/firebase-cli-guide.md
- skills/firebase-basics/references/firebase-service-init.md
- skills/firebase-basics/references/flutter_setup.md
- skills/firebase-basics/references/ios_setup.md
- skills/firebase-basics/references/local-env-setup.md
- skills/firebase-basics/references/refresh/android_studio.md
- skills/firebase-basics/references/refresh/antigravity.md
- skills/firebase-basics/references/refresh/claude.md
- skills/firebase-basics/references/refresh/gemini-cli.md
- skills/firebase-basics/references/refresh/other-agents.md
- skills/firebase-basics/references/setup/android_studio.md
- skills/firebase-basics/references/setup/antigravity.md
- skills/firebase-basics/references/setup/claude_code.md
- skills/firebase-basics/references/setup/cursor.md
- skills/firebase-basics/references/setup/gemini_cli.md
- skills/firebase-basics/references/setup/github_copilot.md
- skills/firebase-basics/references/setup/other_agents.md
- skills/firebase-basics/references/web_setup.md
- skills/firebase-crashlytics/SKILL.md
- skills/firebase-crashlytics/references/android_setup.md
- skills/firebase-crashlytics/references/ios_setup.md
- skills/firebase-data-connect-basics/SKILL.md
- skills/firebase-data-connect-basics/examples.md
- skills/firebase-data-connect-basics/reference/cloud_functions.md
- skills/firebase-data-connect-basics/reference/config.md
- skills/firebase-data-connect-basics/reference/data_seeding.md
- skills/firebase-data-connect-basics/reference/native_sql.md
- skills/firebase-data-connect-basics/reference/operations.md
- skills/firebase-data-connect-basics/reference/realtime.md
- skills/firebase-data-connect-basics/reference/schema.md
- skills/firebase-data-connect-basics/reference/sdk_admin_node.md
- skills/firebase-data-connect-basics/reference/sdk_android.md
- skills/firebase-data-connect-basics/reference/sdk_flutter.md
- skills/firebase-data-connect-basics/reference/sdk_ios.md
- skills/firebase-data-connect-basics/reference/sdk_web.md
- skills/firebase-data-connect-basics/reference/search.md
- skills/firebase-data-connect-basics/reference/security.md
- skills/firebase-data-connect-basics/templates.md
- skills/firebase-firestore/SKILL.md
- skills/firebase-firestore/references/enterprise/android_sdk_usage.md
- skills/firebase-firestore/references/enterprise/data_model.md
- skills/firebase-firestore/references/enterprise/flutter_setup.md
- skills/firebase-firestore/references/enterprise/indexes.md
- skills/firebase-firestore/references/enterprise/ios_setup.md
- skills/firebase-firestore/references/enterprise/provisioning.md
- skills/firebase-firestore/references/enterprise/python_sdk_usage.md
- skills/firebase-firestore/references/enterprise/web_sdk_usage.md
- skills/firebase-firestore/references/standard/android_sdk_usage.md
- skills/firebase-firestore/references/standard/flutter_setup.md
- skills/firebase-firestore/references/standard/indexes.md
- skills/firebase-firestore/references/standard/ios_setup.md
- skills/firebase-firestore/references/standard/provisioning.md
- skills/firebase-firestore/references/standard/web_sdk_usage.md
- skills/firebase-hosting-basics/SKILL.md
- skills/firebase-hosting-basics/references/configuration.md
- skills/firebase-hosting-basics/references/deploying.md
- skills/firebase-remote-config-basics/SKILL.md
- skills/firebase-remote-config-basics/references/android_setup.md
- skills/firebase-remote-config-basics/references/ios_setup.md
- skills/firebase-security-rules-auditor/SKILL.md
- skills/firestore-rules-creation/SKILL.md
- skills/xcode-project-setup/SKILL.md
- skills/xcode-project-setup/scripts/xcode_spm_setup/.gitignore
- skills/xcode-project-setup/scripts/xcode_spm_setup/Package.resolved
- skills/xcode-project-setup/scripts/xcode_spm_setup/Package.swift
- skills/xcode-project-setup/scripts/xcode_spm_setup/Sources/main.swift
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More engineering skills and plugins
extension-to-functions-codebaseFirebaseSkill for converting an installed Firebase Extension (or extension source) into a standalone Cloud Functions for Firebase codebase or… No issuesEngineeringSecurity499
firebase-ai-logic-basicsFirebaseIntegrates Firebase AI Logic (formerly Vertex AI for Firebase) into mobile and web apps (Android, iOS, Web, and Flutter) to call Gemini… Review findingsEngineeringResearch499
firebase-app-hosting-basicsFirebaseDeploys and manages full-stack web applications (Next.js, Angular) with Server-Side Rendering (SSR) using Firebase App Hosting. Use when… No issuesEngineeringSecurity499
firebase-basicsFirebaseProvides foundational Firebase CLI setup, CLI installation, version checks (`firebase-tools@latest --version`), CLI login (including… Review findingsEngineeringData & analytics499