# Firebase Security Rules Auditor

Audit Firestore and Cloud Storage rules for security gaps\.

Canonical: https://claudelist.com/listings/skill-firebase-agent-skills-firebase-security-rules-auditor

Category: Skills

Source: vendor · Firebase

Source checked: 2026-10-14

Website: https://github.com/firebase/agent-skills/tree/main/skills/firebase-security-rules-auditor

Audits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks. Use when auditing/reviewing rules, running red-team rule assessments, or scoring against auditor checklists. Don't use for Firebase CLI (login, deploy), Auth, Crashlytics, Remote Config, or database queries.

## Install or set up

1. Review this skill’s `SKILL.md` and any prerequisites at the source.
2. From the project where you use Claude Code, run the command below. It installs only this skill into project scope; add `-g` for your personal scope.
3. Restart Claude Code and invoke `/firebase-security-rules-auditor` or ask Claude to use the skill. If it does not appear, check `.claude/skills/` and the source’s setup notes.

```sh
npx skills add https://github.com/firebase/agent-skills/tree/main/skills/firebase-security-rules-auditor --agent claude-code
```

Installation guide: https://github.com/firebase/agent-skills/tree/main/skills/firebase-security-rules-auditor