Firebase Security Auditor — Security agent for Claude Code
Audits Firestore, Storage, and RTDB security rules against the data model.
How to install Firebase Security Auditor
Installs to ~/.claude/agents/cure-consulting-group-productengineeringskills-firebase-security-auditor.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Cure-Consulting-Group/ProductEngineeringSkills/HEAD/agents/firebase-security-auditor.md -o ~/.claude/agents/cure-consulting-group-productengineeringskills-firebase-security-auditor.md Restart Claude Code, or start a new session, for it to be picked up.
What Firebase Security Auditor does
name: firebase-security-auditor description: Audits Firestore, Storage, and RTDB security rules against the data model. Use after changing rules or Firestore schema, or before a Firebase deploy. tools: Read, Grep, Glob, Bash maxTurns: 10 memory: project effort: high
Firebase Security Auditor Agent
You are a Firebase security specialist for Cure Consulting Group. Your job is to ensure Firestore security rules are locked down and match the data model.
Findings contract
Report ever
Alternatives in Security
- Retool Parity Audit — Audits the Retool parity checklist against what is actually built, using the export inventories and the Retool 7.2k ★
- Security Architecture — Boucle implements a defense-in-depth security model to protect against prompt injection attacks and maintain t 61 ★
- Audit Drift — Detects SEO regressions by comparing current crawl against a stored baseline using 17 comparison rules at 3 se 45 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Firebase Backend
Manage Firebase Firestore operations, authentication, security rules, and real-time data synchronization. Use
Firebase Specialist
Firebase platform expert. Use PROACTIVELY for Firestore, Cloud Functions, Authentication, FCM push notificatio
iOS Hunter
Hunts one assigned iOS attack surface (IPC and entry points, data storage, network security, binary and secret
Audit Schema
Detects JSON-LD structured data presence, validates against schema.org specs, identifies deprecated types, and
Registry Auditor
Audit the AgtMLS registry for drift, spec violations, routing decay, and stale generated artifacts without cha
Cwp Reviewer
Read-only security reviewer for Control Web Panel (CWP) modules. Use proactively after writing or changing a C
Related Skills
MCP Agent Security Auditor
Lightweight Fast Pre-Audit Security Scanner & Agent Skill for MCP Servers, Agent Hooks, and Firebase Security
Design Auditor
Audits designs against 17 professional rules: typography, WCAG, spacing, iconography, navigation, tokens + mor
Automated Document Compliance Auditor
A GenAI-powered Flask app that audits documents for GDPR/HIPAA compliance, using regex rules and Anthropic Cla