56 results available
Sign in
Skills directory

firebase-basics

google

·

Last changed
Hardened

This skill has been hardened by Chainguard

Last changed

This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 56. Classified findings closed: 28. Classified findings remaining: 28. Unclassified scanner findings remaining: 0. Review findings closed: 0. Review findings remaining: 23.


Open before hardening

1

High

21

Medium

34

Low
Open after hardening

21

Medium

7

Low

Expand
File
Group
Subtype
Severity
Status
references/refresh/android_studio.md

Excessive Agency & Rogue Autonomy

—

High
Closed
references/setup/antigravity.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/refresh/android_studio.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/flutter_setup.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/web_setup.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/android_setup.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/setup/gemini_cli.md

Supply Chain & Install-Time Trust

—

Medium
Open
references/firebase-service-init.md

Supply Chain & Install-Time Trust

—

Medium
Open

56 findings


SKILL.md

Firebase Basics

Prerequisites

Complete these setup steps before proceeding:

  1. Local Environment Setup: Verify the environment is properly set up so we can use Firebase tools:

    • Run npx firebase-tools@latest --version to check if the Firebase CLI is installed.
    • Verify if the Firebase MCP server is installed using your existing tools.
    • Before configuring any extensions or agent environments below, read references/local-env-setup.md.
    • if 'firebase-basics' is the only Firebase skill available to you, follow the reference for your agent environment to set up the full suite of Firebase skills:
  2. Authentication: Ensure you are logged in to Firebase so that commands have the correct permissions. Run npx firebase-tools@latest login. For environments without a browser (e.g., remote shells), use npx firebase-tools@latest login --no-localhost.

    • The command should output the current user.
    • If you are not logged in, follow the interactive instructions from this command to authenticate.
  3. Active Project: Most Firebase tasks require an active project context.

    • If using an existing Project ID:

      1. Check the current project by running npx firebase-tools@latest use.
      2. If the command outputs Active Project: <project-id>, confirm with the user if this is the intended project.
      3. If not, or if no project is active, set the project provided by the user:
      npx firebase-tools@latest use <PROJECT_ID>
    • If creating a new project: Run the following command to create it:

      npx firebase-tools@latest projects:create <project-id> --display-name "<display-name>"

      Note: The <project-id> must be 6-30 characters, lowercase, and can contain digits and hyphens. It must be globally unique.

Firebase Usage Principles

Adhere to these principles:

  1. Use npx for CLI commands: prepend commands with npx firebase-tools@latest. For example, use npx firebase-tools@latest --version.
  2. Prioritize official knowledge: For any Firebase-related knowledge, consult the developerknowledge_search_documents MCP tool before falling back to Google Search or your internal knowledge base. Including "Firebase" in your search query significantly improves relevance.
  3. Follow Agent Skills for implementation guidance: Skills provide opinionated workflows (CUJs), security rules, and best practices. Always consult them to understand how to implement Firebase features correctly instead of relying on general knowledge.
  4. Use Firebase MCP Server tools instead of direct API calls: Whenever you need to interact with remote Firebase APIs (such as fetching Crashlytics logs or executing Data Connect queries), use the tools provided by the Firebase MCP Server instead of attempting manual API calls.
  5. Keep Plugin / Agent Skills updated: if you encounter issues with outdated tools or commands, follow the steps below based on your agent environment:
  6. Automate Config File Retrieval: When setting up iOS or Android apps, do NOT direct users to the Firebase Console to download google-services.json or GoogleService-Info.plist. Instead, use the Firebase CLI to fetch the config programmatically:
    • For Android: npx firebase-tools@latest apps:sdkconfig ANDROID <APP_ID> --project <PROJECT_ID>
    • For iOS: npx firebase-tools@latest apps:sdkconfig IOS <APP_ID> --project <PROJECT_ID> Save the output to the appropriate location (e.g., app/google-services.json for Android, or a path to be linked by xcode-project-setup for iOS).

References

Common Issues

  • Login Issues: If the browser fails to open during the login step, use npx firebase-tools@latest login --no-localhost instead.

Install

Install with chainctl
chainctl skill install public/google/firebase-basics:latest
Get started with chainctl
View source

Harden your own skills

Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.

Provenance

Upstream sourcehttps://github.com/google/skills
Upstream commit92aa4282b6f7501cb25694e51901b963842f391e
OCI reference

skills.cgr.dev/public/github.com/google/skills/cloud/firebase-basics:latest

License

Apache-2.0

Files

HARDENING.md

LICENSE

SKILL.md

references/android_setup.md

references/firebase-cli-guide.md

references/firebase-service-init.md

references/flutter_setup.md

references/ios_setup.md

references/local-env-setup.md

references/refresh/android_studio.md

references/refresh/antigravity.md

references/refresh/claude.md

references/refresh/gemini-cli.md

references/refresh/other-agents.md

references/setup/android_studio.md

references/setup/antigravity.md

references/setup/claude_code.md

references/setup/cursor.md

references/setup/gemini_cli.md

references/setup/github_copilot.md

references/setup/other_agents.md

references/web_setup.md


The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.