firebase-security-rules-auditor

What problem does it solve?

This Skill helps developers identify security weaknesses in Firestore security rules by systematically checking for authorization gaps, validation failures, and privilege escalation risks before deployment.

Core Features & Use Cases

• Security Rule Auditing: Reviews Firestore rules using a red-team mindset to uncover bypasses, insecure ownership checks, and permission flaws.
• Validation Analysis: Examines update bypasses, type validation, resource limits, and unsafe reliance on user-controlled fields.
• Use Case: Use this Skill when reviewing a new Firebase ruleset for an application to receive a structured security assessment with findings, severity levels, and remediation recommendations.

Quick Start

Ask the firebase security rules auditor skill to evaluate my Firestore security rules and return a JSON security assessment.