5Low
The skill misrepresents itself as an active Firebase security rules
Behavior Analysis
Mismatch detected — The skill's stated purpose is to 'act as an auditor,' implying direct execution or interaction with Firebase. However, the skill content only provides instructions for an AI model to perform an audit, without any executable code, API calls, or external tool integrations. It is a prompt, not an active auditor.
Claims to do
Overview: This skill acts as an auditor for Firebase Security Rules, evaluating them against a rigorous set of criteria to ensure they are secure, robust, and correctly implemented.
Actually does
The skill provides detailed instructions to an AI model on how to perform a security audit of Firebase Security Rules. It defines a mandatory checklist, scoring criteria, and an output JSON format for the AI's assessment. It does not call any external tools, access external data, run commands, or contact URLs.
Skill Info
Namefirebase/agent-skills/firebase-security-rules-auditor
Registrygithub
Version4679fc8dd31f
PURLpkg:github/firebase/agent-skills@4679fc8dd31f?skill=firebase-security-rules-auditor
Stars224
Installs455,628
Source
SHA-256b1b99b4d7951...
SHA-1278ad0388e10...
MD5e5143fa6159d...
TLSHf171965726a8...
Size3,529 bytes
Install
Claude CodeDocs
/plugin marketplace add firebase/agent-skills/plugin install firebase-security-rules-auditor@firebase/agent-skills
Gemini CLIDocs
gemini extensions install https://github.com/firebase/agent-skills.git --consent
CursorDocs
Skills.shDocs
npx skills add https://github.com/firebase/agent-skills --skill firebase-security-rules-auditorAssessments (1)
AI Agent Traps ↗Description Mismatchinfodescription mismatch
The skill's stated purpose is to 'act as an auditor,' implying direct execution or interaction with Firebase. However, the skill content only provides instructions for an AI model to perform an audit, without any executable code, API calls, or external tool integrations. It is a prompt, not an active auditor.
85% confidence
The skill content consists solely of instructions, checklists, and output format definitions for an AI model, with no code, API calls, or external resource interactions.
Version History (2)
Dependencies (1)
firebase.claude-plugin/marketplace.jsonnot scanned
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/firebase/agent-skills/firebase-security-rules-auditor)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/firebase/agent-skills/firebase-security-rules-auditor"><img src="https://mondoo.com/ai-agent-security/api/badge/github/firebase/agent-skills/firebase-security-rules-auditor.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/firebase/agent-skills/firebase-security-rules-auditor.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow