firebase-security-rules-auditor — Skills

What it does

emailverified is also checked (request.auth.token.emailverified == true).

It is implemented in a way that does not allow additional admins to add

1 (Critical): Unauthorized data access (leaks), privilege escalation, or

2 (Major): Broken business logic, self-assigned roles, bypass of controls.

3 (Moderate): PII exposure (e.g., public emails), Inconsistent validation

4 (Minor): Problems that result in self-data corruption like update

5 (Secure): Comprehensive validation, strict ownership, and role-based

A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.

Source

Repository: https://github.com/firebase/agent-skills

firebase-security-rules-auditor FAQ

What does the firebase-security-rules-auditor skill do?

A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust. emailverified is also checked (request.auth.token.emailverified == true). It is implemented in a way that does not allow additional admins to add

What does firebase-security-rules-auditor require?

single hardcoded admin email (e.g., checking request.auth.token.email == emailverified is also checked (request.auth.token.emailverified == true).

How do I install firebase-security-rules-auditor?

Run: npx -y skills add https://github.com/firebase/agent-skills --skill firebase-security-rules-auditor --agent claude-code — the source lives at github.com/firebase/agent-skills.

Maintain firebase-security-rules-auditor?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[![firebase-security-rules-auditor on getagentictools](https://getagentictools.com/badge/skills/firebase-agent-skills-firebase-security-rules-auditor.svg)](https://getagentictools.com/skills/firebase-agent-skills-firebase-security-rules-auditor?ref=badge)

npx agentictools info skills/firebase-agent-skills-firebase-security-rules-auditor

The second line is the CLI lookup for this page — handy in READMEs and docs.