firebase – Security skill for AI agents
Firebase gives you a complete backend in minutes - auth, database, storage, functions, hosting. But the ease of setup hides real complexity. Security rules are your last line of defense, and they're often wrong.
Install the firebase skill with one command
Pick the tool you use, copy the command and paste it in your terminal. The skill lands in that tool's skills folder and is ready in your next session.
Claude Code
mkdir -p ~/.claude/skills && curl -fsSL https://skill.dn1nguoi.com/z/firebase-b39b8.tgz | tar xz -C ~/.claude/skills
Call it in Claude Code: /firebase – then describe the task you want done.
Codex
mkdir -p ~/.codex/skills && curl -fsSL https://skill.dn1nguoi.com/z/firebase-b39b8.tgz | tar xz -C ~/.codex/skills
Call it in Codex: $firebase – then describe the task you want done.
Hermes Agent
mkdir -p ~/.hermes/skills && curl -fsSL https://skill.dn1nguoi.com/z/firebase-b39b8.tgz | tar xz -C ~/.hermes/skills
Call it in Hermes Agent: /firebase – then describe the task you want done.
DeepSeek
mkdir -p ~/.deepcode/skills && curl -fsSL https://skill.dn1nguoi.com/z/firebase-b39b8.tgz | tar xz -C ~/.deepcode/skills
Call it in DeepSeek: /firebase – then describe the task you want done.
SKILL.md content
Firebase
Firebase gives you a complete backend in minutes - auth, database, storage,
functions, hosting. But the ease of setup hides real complexity. Security rules
are your last line of defense, and they're often wrong. Firestore queries are
limited, and you learn this after you've designed your data model.
This skill covers Firebase Authentication, Firestore, Realtime Database, Cloud
Functions, Cloud Storage, and Firebase Hosting. Key insight: Firebase is
optimized for read-heavy, denormalized data. Choose relational versus denormalized storage from consistency and query requirements;
Firestore is not the right choice for every workload.
2025 lesson: Firestore pricing can surprise you. Reads are cheap until they're
not. A poorly designed listener can cost more than a dedicated database. Plan
your data model for your query patterns, not your data relationships.
Detailed Guide
Read [the detailed guide](references/detailed-guide.md) before executing this skill. It retains the complete procedure and reference material. Treat its safety, prerequisites, and validation requirements as mandatory. For focused work, load the relevant sections; for end-to-end work, read the guide completely.
When to Use
- User mentions or implies: firebase
- User mentions or implies: firestore
- User mentions or implies: firebase auth
- User mentions or implies: cloud functions
- User mentions or implies: firebase storage
- User mentions or implies: realtime database
- User mentions or implies: firebase hosting
- User mentions or implies: firebase emulator
- User mentions or implies: security rules
- User mentions or implies: firebase admin
Example
User request:
> Use @firebase for this task: Firebase gives you a complete backend in minutes - auth, database, storage, functions, hosting.
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
Related skills
- firewall-config – Configure iptables, nftables, and cloud firewalls. Implement network segmentation and…
- firmware-analyst – Expert firmware analyst specializing in embedded systems, IoT security, and hardware…
- firmware-pentest – Firmware penetration testing following the OWASP FSTM nine-stage flow: extraction, EMBA…
- fixing-accessibility – Audit and fix HTML accessibility issues including ARIA labels, keyboard navigation…
- fixing-metadata – Audit and fix HTML metadata including page titles, meta descriptions, canonical URLs…
- security-guidance – PreToolUse security-anti-pattern hook for Claude Code. Catches 12 common security risks…
- security-pen-testing – Use when the user asks to perform security audits, penetration testing, vulnerability…
- frontend-mobile-security-xss-scan – Inspect frontend code for XSS injection points, unsafe DOM manipulation, and missing…