Install
$ agentstack add skill-gdvega-super-android-kotlin-firebase-skill-firebase-emulator-ci ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Purpose
Run Firebase-sensitive tests locally and in CI without touching production projects or open rules.
When to use
- Testing Firebase Security Rules.
- Configuring Firebase Emulator Suite.
- Adding CI for Firestore, Auth, Functions or Storage tests.
- Separating dev, staging and production Firebase environments.
Inputs to inspect
firebase.jsonfirestore.rulesandstorage.rulesfunctions/package files.github/workflows/*package.jsonscriptstest/andandroidTest/
Required workflow
- Identify Firebase products that need emulators.
- Configure emulator ports and project aliases.
- Write rules or functions tests against emulators only.
- Run tests with
emulators:execin CI. - Document environment separation and production safeguards.
Rules
- Do not point emulator tests at production.
- Do not use open rules in production.
- Use
emulators:execfor CI lifecycle when possible. - Keep service accounts out of the repo.
- Fail CI on rules regressions.
Related existing skills
Local skills to invoke
- firebase-core
- firestore
- firebase-cloud-functions
- testing
- security-privacy
External companion skills to use when installed
Do not assume these companion skills are installed. Prefer the local skills above first, then consult [Companion Skills](../../docs/COMPANION_SKILLS.md) for install and verification commands.
- skydoves/android-testing-skills — use for deeper Android or Compose UI testing, semantics, assertions or test workflow guidance.
- firebase/agent-skills — use for deeper Firebase product, Firestore, Security Rules or emulator workflow guidance when installed.
Files commonly touched
firebase.jsonfirestore.rulesstorage.rulesfunctions/package.json.github/workflows/*test/**/*rules*
Commands to validate
firebase emulators:exec --only firestore "npm test"
npm test
./gradlew test
Common mistakes to avoid
- Running tests against real production data.
- Keeping permissive demo rules after setup.
- Starting emulators manually in CI without cleanup.
- Forgetting Storage rules when Firestore is tested.
Checklist
- Emulator config exists.
- Rules tests use emulator host.
- CI command uses emulator lifecycle.
- No secrets committed.
- Dev/staging/prod separation documented.
Example prompts
- Use $super-android-kotlin-firebase to add Firebase Emulator CI for Firestore rules.
- Use $super-android-kotlin-firebase to make these Firebase tests avoid production.
Expected response style
Respond with: brief diagnosis, change plan, affected files, code or diff summary, validation commands, tests added or recommended, risks, and next step. For review tasks, lead with findings ordered by severity.
References
- ../../docs/audits/FUENTES_LOCALES.md
- references/emulator-suite-setup.md
- references/firestore-rules-testing.md
- references/github-actions-emulator-ci.md
- references/dev-staging-prod-separation.md
- templates/firebase-json-template.md
- templates/firestore-rules-test-template.md
- templates/github-actions-firebase-emulator-template.yml
- templates/emulator-exec-script-template.md
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: GDvega
- Source: GDvega/super-android-kotlin-firebase-skill
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.