56 results available
Sign in
Skills directory

firebase-firestore

firebase

·

Last changed
Hardened

This skill has been hardened by Chainguard

Last changed

This version passed the hardening gate. Hardening applied 17 targeted changes and preserved all other text. Classified findings before hardening: 23. Classified findings closed: 11. Classified findings remaining: 12. Unclassified scanner findings remaining: 0. Review findings closed: 1. Review findings remaining: 11.

Open before hardening

1

High

9

Medium

13

Low
Open after hardening

9

Medium

3

Low
Expand
File
Group
Subtype
Severity
Status
SKILL.md

Obfuscation & Evasion

Trigger-based activation

High
Closed
references/enterprise/provisioning.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/standard/ios_setup.md

Excessive Agency & Rogue Autonomy

—

Medium
Open
references/enterprise/indexes.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/standard/provisioning.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/enterprise/android_sdk_usage.md

Prompt Injection

Indirect prompt injection

Medium
Open
references/standard/indexes.md

Supply Chain & Install-Time Trust

—

Medium
Open
SKILL.md

Supply Chain & Install-Time Trust

—

Medium
Open

23 findings

SKILL.md

Cloud Firestore Database and Operations

Before setting up dependencies, writing data models, or configuring security rules, you MUST always identify the Firestore instance edition.

1. Instance Selection and Edition Detection

Run the following command to list current Firestore databases:

npx firebase-tools@latest firestore:databases:list

A. Instance Found

  1. For each database found, inspect its edition and details:

    npx firebase-tools@latest firestore:databases:get <database-id>

  2. Ask the user which database instance they wish to target or if they would prefer to create a new instance.

  3. Once the target instance is established:

    • If the edition is STANDARD, follow the guides under references/standard/.
    • If the edition is ENTERPRISE mode, follow the guides under references/enterprise/.

B. No Instance Found (or New Requested)

If no databases exist or the user requests a new one, default to provisioning an Enterprise edition database and ask the user what location to use. Run npx firebase-tools@latest firestore:locations to get the list of options. Suggest colocating with other resources if applicable.

Once the location is determined, create the database:

npx firebase-tools@latest firestore:databases:create <database-id> --edition="enterprise" --location="<selected-location>"

Proceed with using the guides under references/enterprise/.

2. Specialized Guides

Based on the identified or created instance edition, open and read the corresponding reference guides:

Standard Edition (references/standard/)

  • Provisioning: Read provisioning.md
  • Security Rules: See the firestore-rules-creation skill
  • SDK Usage: Read web_sdk_usage.md, android_sdk_usage.md, ios_setup.md, or flutter_setup.md
  • Indexes: Read indexes.md

Enterprise Edition / Native Mode (references/enterprise/)

  • Provisioning: Read provisioning.md

  • Data Model: Read data_model.md

  • Security Rules: See the firestore-rules-creation skill

  • SDK Usage:

    Read web_sdk_usage.md, python_sdk_usage.md, android_sdk_usage.md, ios_setup.md, or flutter_setup.md

  • Indexes: Read indexes.md

Install

Install with chainctl
chainctl skill install public/firebase/firebase-firestore:latest
Get started with chainctl
View source

Harden your own skills

Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.

Provenance

Upstream sourcehttps://github.com/firebase/agent-skills
Upstream commitbf6538ef0e147831adc04c31291549f7dc399e97
OCI reference

skills.cgr.dev/public/github.com/firebase/skills/firebase-firestore:latest

License

Apache-2.0

Files

HARDENING.md

LICENSE

SKILL.md

references/enterprise/android_sdk_usage.md

references/enterprise/data_model.md

references/enterprise/flutter_setup.md

references/enterprise/indexes.md

references/enterprise/ios_setup.md

references/enterprise/provisioning.md

references/enterprise/python_sdk_usage.md

references/enterprise/web_sdk_usage.md

references/standard/android_sdk_usage.md

references/standard/flutter_setup.md

references/standard/indexes.md

references/standard/ios_setup.md

references/standard/provisioning.md

references/standard/web_sdk_usage.md

The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing

Solutions

FedRAMPPCI DSSCMMC 2.0SOC 2Golden ImagesCVE RemediationPublic SectorStartups

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsSupply Chain Security 101Chainguard CoursesDocumentationTrust CenterChainguard Slack Community

Company

About UsBlogOpen Source LeadershipPartnersNewsroomCareersLegal
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.