70High
The skill executes `npx firebase-tools@latest`, creating a supply chain risk by running arbitrary code from npm, potentially leading to host command execution.
Behavior Analysis
Description verified — behavior matches claim
Claims to do
Firebase Data Connect: Firebase Data Connect is a relational database service using Cloud SQL for PostgreSQL with GraphQL schema, auto-generated queries/mutations, and type-safe SDKs.
Actually does
This skill uses the `npx firebase-tools` command-line utility to initialize, emulate, generate SDKs for, and deploy Firebase Data Connect backends. It processes local configuration files (`.yaml`) and GraphQL schema/operation definitions (`.gql`) to manage a PostgreSQL-based relational database service with GraphQL APIs.
Skill Info
Namefirebase/agent-skills/firebase-data-connect-basics
Registrygithub
Versionbfd90c4c5ec5
PURLpkg:github/firebase/agent-skills@bfd90c4c5ec5#firebase-data-connect-basics
Stars224
Installs455,628
Source
SHA-25691719f169d92...
SHA-1872792545655...
MD5201e9d7007f2...
TLSH0b8173c19160...
Size4,013 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
https://github.com/firebase/agent-skills/tree/main/skills/firebase-data-connect-basics455,628 installs
Claude CodeDocs
/plugin marketplace add firebase/agent-skills/plugin install firebase-data-connect-basics@firebase/agent-skills
Gemini CLIDocs
gemini extensions install https://github.com/firebase/agent-skills.git --consent
CursorDocs
Skills.shDocs
npx skills add https://github.com/firebase/agent-skills --skill firebase-data-connect-basicsAssessments (1)
AI Agent Traps ↗NPM package execution via npx with supply chain riskhighcommand execution, supply chain
The skill instructs the agent to execute `npx -y firebase-tools@latest` commands, which can download and run arbitrary code from the npm registry. This introduces a supply chain risk if the `firebase-tools` package or npm registry is compromised, potentially leading to arbitrary command execution on the host system.
100% confidenceline 81
npx -y firebase-tools@latest init dataconnect
Version History (2)
Dependencies (1)
firebase.claude-plugin/marketplace.jsonnot scanned
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/firebase/agent-skills/firebase-data-connect-basics)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/firebase/agent-skills/firebase-data-connect-basics"><img src="https://mondoo.com/ai-agent-security/api/badge/github/firebase/agent-skills/firebase-data-connect-basics.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/firebase/agent-skills/firebase-data-connect-basics.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow