firebase-security-rules-auditor
firebase-security-rules-auditor is an agent skill published by firebase, listed under deploy & operate. It lives in the firebase/agent-skills repository, which has 488 GitHub stars and is licensed under Apache-2.0; we last read it on 2026-10-09.
Audits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks.
Install
skills is a generic installer for any repository of Claude agent skills -- it reads firebase/agent-skills’s own structure rather than assuming one, the same way this page reads the skill’s own SKILL.md rather than assuming a format.
npx skills add firebase/agent-skills
What it connects to
Unverified means a mention in the skill’s own description, not a citation. A wrong claim here costs nothing to correct and nothing to trust yet.
Maintenance
Audits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks. Use when auditing/reviewing rules, running red-team rule assessments, or scoring against auditor checklists. Don't use for Firebase CLI (login, deploy), Auth, Crashlytics, Remote Config, or database queries.
firebase-security-rules-auditor compared with similar skills
| Skill | Publisher | What it does | Repo stars | Last update |
|---|---|---|---|---|
| firebase-security-rules-auditor (this page) | firebase | Audits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role byp… | 488 | 2026-10-20 |
| firebase-app-hosting-basics(same repository) | firebase | Deploys and manages full-stack web applications (Next.js, Angular) with Server-Side Rendering (SSR) using Fir… | 488 | 2026-10-20 |
| firebase-basics(same repository) | firebase | Provides foundational Firebase CLI setup, CLI installation, version checks (`firebase-tools@latest --version`… | 488 | 2026-10-20 |
| internal-comms | anthropic | A set of resources to help me write all kinds of internal communications, using the formats that my company l… | 183,845 | 2026-10-09 |
| xlsx | anthropic | Use this skill any time a spreadsheet file is the primary input or output. This means any task where the user… | 183,845 | 2026-10-09 |
| ci-cd-and-automation | addyosmani | Automates CI/CD pipeline setup. Use when setting up or modifying build and deployment pipelines. Use when you… | 110,611 | 2026-10-13 |
| observability-and-instrumentation | addyosmani | Instruments code so production behavior is visible and diagnosable. Use when adding logging, metrics, tracing… | 110,611 | 2026-10-13 |
Skills from the same repository first, then others for this job by repository stars. Figures are from each repository when we last read it.
Common questions about firebase-security-rules-auditor
- What does firebase-security-rules-auditor do?
- Audits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks.
- How do I install firebase-security-rules-auditor?
- Run npx skills add firebase/agent-skills. The skills installer reads the repository’s own structure, so it works for any repository of agent skills.
- Who publishes firebase-security-rules-auditor?
- firebase.
- Is firebase-security-rules-auditor maintained, and what licence does it use?
- Its repository has 488 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-10-20. The repository declares the Apache-2.0 licence.
More agent skills for deploy & operate
- ai-content-pipelineby 101-skills
- explainer-video-guideby 101-skills
- ci-cd-and-automationby addyosmani
- observability-and-instrumentationby addyosmani
- internal-commsby anthropic
- xlsxby anthropic