What is firebase-security-rules-auditor?
firebase-security-rules-auditor is a Claude skill by firebase that audit Firestore security rules and flag risky patterns. It is listed under Security and has 472 GitHub stars.
| Type | Claude skill |
|---|---|
| Author | firebase |
| Repository | firebase/skills |
| Popularity | 472 GitHub stars |
| Category | Security |
| Security | Low risk (100/100) |
| Rank | #748 of 1,262 Claude skills; #19 in Security |
| SKILL.md length | 85 lines |
| License | Apache-2.0 |
| Last commit | 2026-10-15 |
| Stars this week | +8 |
Is firebase-security-rules-auditor safe to install?
firebase-security-rules-auditor scores 100/100 on the MCPMods security check: Low risk. No checks raised a concern. It passed 9 of 9 checks.
Skill results come from a static scan of its SKILL.md for instruction overrides, hidden actions, risky commands and credential access.
| Check | Result |
|---|---|
| No instruction-override phrases | Pass |
| No hidden actions | Pass |
| No pipe-to-shell installers | Pass |
| No obfuscated code | Pass |
| No destructive commands | Pass |
| Doesn't ask for keys or credentials | Pass |
| No network requests | Pass |
| No shell commands | Pass |
| Installs no packages | Pass |
How do I install firebase-security-rules-auditor?
- Install with the skills CLI. Works for Claude Code and other agents that read skills.
npx skills add https://github.com/firebase/skills --skill firebase-security-rules-auditor
- Or copy it by hand. Claude Code loads any folder with a SKILL.md from ~/.claude/skills.
git clone https://github.com/firebase/skills cp -r skills/skills/firebase-security-rules-auditor ~/.claude/skills/firebase-security-rules-auditor
- Use it. Claude loads the skill when a task matches its description. You can also name it in your prompt.
Use the firebase-security-rules-auditor skill to …
Or ask Claude to set it up
Paste this into Claude Code and it installs firebase-security-rules-auditor for you:
Install the "firebase-security-rules-auditor" skill from https://github.com/firebase/skills/tree/main/skills/firebase-security-rules-auditor into ~/.claude/skills, then tell me in one line what it does.
More from firebase/skills
This repository has at least 9 Claude skills on MCPMods.
- developing-genkit-dart: Build AI apps with the Genkit Dart SDK (Not scanned)
- developing-genkit-go: Build AI apps with the Genkit Go SDK (Not scanned)
- developing-genkit-js: Build AI-powered apps with Firebase Genkit in Node.js (Not scanned)
- firebase-ai-logic-basics: Call Gemini models from web and mobile apps via Firebase AI Logic (Low risk)
- firebase-app-hosting-basics: Deploy and manage full-stack web apps (Next.js, Angular, etc.) (Low risk)
- firebase-auth-basics: Set up Firebase Authentication with sign-in providers (Low risk)
- firebase-basics: Handle Firebase CLI install, auth, and day-to-day workflow (Low risk)
- firebase-data-connect-basics: Build Firebase Data Connect backends backed by Cloud SQL (Low risk)