56 results available
Sign in
Skills directory

firebase-basics

firebase

·

Last changed
Hardened

This skill has been hardened by Chainguard

Last changed

This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 56. Classified findings closed: 11. Classified findings remaining: 45. Unclassified scanner findings remaining: 0. Review findings closed: 0. Review findings remaining: 21.


Open before hardening

1

High

21

Medium

34

Low
Open after hardening

21

Medium

24

Low

Expand
File
Group
Subtype
Severity
Status
references/refresh/android_studio.md

Excessive Agency & Rogue Autonomy

—

High
Closed
references/setup/antigravity.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/refresh/android_studio.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/flutter_setup.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/web_setup.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/android_setup.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/setup/gemini_cli.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/firebase-service-init.md

Supply Chain & Install-Time Trust

—

Medium
Open

56 findings


SKILL.md

Prerequisites

Complete these setup steps before proceeding:

  1. Local Environment Setup: Verify the environment is properly set up so we can use Firebase tools:

    • Run npx -y firebase-tools@latest --version to check if the Firebase CLI is installed.
    • Verify if the Firebase MCP server is installed using your existing tools.
    • Before configuring any extensions or agent environments below, read references/local-env-setup.md.
    • if 'firebase-basics' is the only Firebase skill available to you, follow the reference for your agent environment to set up the full suite of Firebase skills:
  2. Authentication: Ensure you are logged in to Firebase so that commands have the correct permissions. Run npx -y firebase-tools@latest login. For environments without a browser (e.g., remote shells), use npx -y firebase-tools@latest login --no-localhost.

    • The command should output the current user.
    • If you are not logged in, follow the interactive instructions from this command to authenticate.
  3. Active Project: Most Firebase tasks require an active project context.

    • If using an existing Project ID:

      1. Check the current project by running npx -y firebase-tools@latest use.

      2. If the command outputs Active Project: <project-id>, confirm with the user if this is the intended project.

      3. If not, or if no project is active, set the project provided by the user:

        npx -y firebase-tools@latest use <PROJECT_ID>
    • If creating a new project: Run the following command to create it:

      npx -y firebase-tools@latest projects:create <project-id> --display-name "<display-name>"

      Note: The <project-id> must be 6-30 characters, lowercase, and can contain digits and hyphens. It must be globally unique.

Firebase Usage Principles

Adhere to these principles:

  1. Use npx for CLI commands: To ensure you always use the latest version of the Firebase CLI, always prepend commands with npx -y firebase-tools@latest instead of just firebase. For example, use npx -y firebase-tools@latest --version.
  2. Prioritize official knowledge: For any Firebase-related knowledge, consult the developerknowledge_search_documents MCP tool before falling back to Google Search or your internal knowledge base. Including "Firebase" in your search query significantly improves relevance.
  3. Follow Agent Skills for implementation guidance: Skills provide opinionated workflows (CUJs), security rules, and best practices. Always consult them to understand how to implement Firebase features correctly instead of relying on general knowledge.
  4. Use Firebase MCP Server tools instead of direct API calls: Whenever you need to interact with remote Firebase APIs (such as fetching Crashlytics logs or executing Data Connect queries), use the tools provided by the Firebase MCP Server instead of attempting manual API calls.
  5. Keep Plugin / Agent Skills updated: Since Firebase best practices evolve quickly, if you encounter issues with outdated tools or commands, follow the steps below based on your agent environment:
  6. Automate Config File Retrieval: When setting up iOS or Android apps, do NOT direct users to the Firebase Console to download google-services.json or GoogleService-Info.plist. Instead, use the Firebase CLI to fetch the config programmatically:
    • For Android: npx -y firebase-tools@latest apps:sdkconfig ANDROID <APP_ID> --project <PROJECT_ID>
    • For iOS: npx -y firebase-tools@latest apps:sdkconfig IOS <APP_ID> --project <PROJECT_ID> Save the output to the appropriate location (e.g., app/google-services.json for Android, or a path to be linked by xcode-project-setup for iOS).

References

Common Issues

  • Login Issues: If the browser fails to open during the login step, use npx -y firebase-tools@latest login --no-localhost instead.

Install

Install with chainctl
chainctl skill install public/firebase/firebase-basics:latest
Get started with chainctl
View source

Harden your own skills

Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.

Provenance

Upstream sourcehttps://github.com/firebase/agent-skills
Upstream commit7015793826d11c906b554612f2a7667516079660
OCI reference

skills.cgr.dev/public/github.com/firebase/skills/firebase-basics:latest

License

Apache-2.0

Files

HARDENING.md

LICENSE

SKILL.md

references/android_setup.md

references/firebase-cli-guide.md

references/firebase-service-init.md

references/flutter_setup.md

references/ios_setup.md

references/local-env-setup.md

references/refresh/android_studio.md

references/refresh/antigravity.md

references/refresh/claude.md

references/refresh/gemini-cli.md

references/refresh/other-agents.md

references/setup/android_studio.md

references/setup/antigravity.md

references/setup/claude_code.md

references/setup/cursor.md

references/setup/gemini_cli.md

references/setup/github_copilot.md

references/setup/other_agents.md

references/web_setup.md


The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.