firebase-security-rules-auditor

What the skill teaches

A Firebase skill that has the agent review Firestore and Cloud Storage security rules the way an attacker would. It works through a fixed checklist: updates that bypass create checks, roles or owner fields taken from client data, rules that break the app's own logic, missing size limits, missing type checks, and field restrictions without ownership checks. The agent then gives the rules a score from 1 to 5 and returns findings with severity and fixes as JSON. The skill is a single instruction file with no scripts.

Capabilities

Details