40Medium
The skill instructs the agent to execute system commands like
Behavior Analysis
Mismatch detected — The skill's stated purpose implies it performs integration and covers features directly. However, its actual behavior is to provide instructions, commands, and documentation links for a developer to perform these actions themselves, rather than executing the integration or AI operations directly.
Claims to do
Firebase AI Logic Basics: Firebase AI Logic is a product of Firebase that allows developers to add gen AI to their mobile and web apps using client-side SDKs. You can call Gemini models directly from your app without managing a dedicated backend. Firebase AI Logic, which was previously known as "Vertex AI for Firebase", represents the evolution of Google's AI integration platform for mobile and web developers.
Actually does
This skill instructs users on setting up Firebase AI Logic for web applications. It uses `npm` to install the Firebase CLI globally and `npx firebase-tools` to list Firebase projects/apps and initialize AI Logic within a project. It also provides numerous links to Firebase documentation for further setup, advanced features, and security configurations.
Skill Info
Namefirebase/agent-skills/firebase-ai-logic-basics
Registrygithub
Versionbfd90c4c5ec5
PURLpkg:github/firebase/agent-skills@bfd90c4c5ec5#firebase-ai-logic-basics
Stars224
Installs455,628
Source
SHA-2562e75366487ee...
SHA-1f9ab0a9086ff...
MD574b2bc1d7d79...
TLSHb9b1e856afab...
ssdeep96:yn6x4v1sz...
Size5,271 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
https://github.com/firebase/agent-skills/tree/main/skills/firebase-ai-logic-basics455,628 installs
Claude CodeDocs
/plugin marketplace add firebase/agent-skills/plugin install firebase-ai-logic-basics@firebase/agent-skills
Gemini CLIDocs
gemini extensions install https://github.com/firebase/agent-skills.git --consent
CursorDocs
Skills.shDocs
npx skills add https://github.com/firebase/agent-skills --skill firebase-ai-logic-basicsAssessments (2)
AI Agent Traps ↗Unconfirmed Command Execution via npm/npxmediumcommand execution
The skill instructs the agent to execute system commands using 'npm install -g' and 'npx -y'. These commands can install global packages or run external tools without user confirmation, posing a risk if malicious packages or tools are specified or injected.
80% confidenceline 26
npm install -g firebase@latest npx -y firebase-tools@latest projects:list
Description Mismatchinfodescription mismatch
The skill's stated purpose implies it performs integration and covers features directly. However, its actual behavior is to provide instructions, commands, and documentation links for a developer to perform these actions themselves, rather than executing the integration or AI operations directly.
85% confidence
The skill primarily consists of `npm install` and `npx firebase-tools` commands for setup, and descriptive text with external documentation links, indicating it's a guide rather than an active integration tool.
Version History (2)
Dependencies (1)
firebase.claude-plugin/marketplace.jsonnot scanned
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/firebase/agent-skills/firebase-ai-logic-basics)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/firebase/agent-skills/firebase-ai-logic-basics"><img src="https://mondoo.com/ai-agent-security/api/badge/github/firebase/agent-skills/firebase-ai-logic-basics.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/firebase/agent-skills/firebase-ai-logic-basics.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow