·
Last changedVersion:
This version passed the hardening gate. Hardening applied 1 targeted change and preserved all other text. Classified findings before hardening: 8. Classified findings closed: 0. Classified findings remaining: 8. Unclassified scanner findings remaining: 0. Review findings closed: 2. Review findings remaining: 17.
3
5
3
5
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/ios_setup.md | Excessive Agency & Rogue Autonomy | — | Medium | Open | |
SKILL.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
references/ios_setup.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
references/ios_setup.md | Prompt Injection | Third-party content as instructions | Low | Open | |
SKILL.md | Malicious Code & Command Execution | — | Low | Open | |
SKILL.md | Supply Chain & Install-Time Trust | Install-time download and execute | Low | Open | |
references/ios_setup.md | Malicious Code & Command Execution | — | Low | Open | |
references/ios_setup.md | Supply Chain & Install-Time Trust | Install-time download and execute | Low | Open |
8 findings
This skill provides a complete guide for getting started with Remote Config on Android or iOS. Remote Config allows you to change the behavior and appearance of your app without publishing an app update by maintaining a cloud-based configuration template.
Provisioning Remote Config requires both a Firebase project and a Firebase app,
either Android or iOS. To manage the Remote Config template and conditions via
the command line, use the Firebase CLI. See the firebase-basics skill for
references on project initialization.
If npx -y firebase-tools@latest fails due to registry permissions (403 error):
firebase command directly if the
user confirms it is installed globally.If a command fails because "no active project is selected":
npx -y firebase-tools@latest login:list.--project <PROJECT_ID> to every subsequent command.To learn how to set up Remote Config in your application code, choose your platform:
Follow these guidelines and use the associated CLI tools to ensure efficient and safe use of Remote Config.
To optimize app performance and user experience, follow these recommended patterns (see Loading Strategies):
Use the following commands to manage your Remote Config template and version history through the terminal:
Get current template: Save the remote template to a local JSON file for auditing or modification.
Autonomous Editing & Discovery : Modify the local remote_config.json
directly. Determine the correct signal (e.g., device.country or percent) and
update the "conditions" array and "parameters" map accordingly.
MANDATORY: User Review and Verification : STOP and ask the user to verify your changes before proceeding to deployment.
Deployment Orchestration : To push changes, you must ensure the environment is configured for deployment.
Deploy: Execute the partial deployment command
Verification: After deployment, verify the update by listing the version history.
The SDK provides a number of features to make your application dynamic and responsive to user segments.
Get started with chainctlchainctl skill install public/firebase/firebase-remote-config-basics:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/firebase/skills/firebase-remote-config-basics:latest
Apache-2.0
HARDENING.md
LICENSE
SKILL.md
references/android_setup.md
references/ios_setup.md