Firebase Agent Skills plugin

Q: How do I install the plugin in Claude Code?

Run claude plugin marketplace add firebase/skills, then claude plugin install firebase@firebase. Check the installation with claude plugin marketplace list.

Q: How do I install the skills in Codex, Cursor or Gemini CLI?

For Codex run codex plugin marketplace add firebase/skills and codex plugin add firebase@firebase. For Gemini CLI run gemini extensions install https://github.com/firebase/skills. Other agents can use npx skills add firebase/skills.

Q: Do I need to install the Firebase CLI separately?

No, the skills call it through npx -y firebase-tools@latest. The agent first checks the version with the --version flag, then the account sign-in.

Q: How do I check the installed skills?

Run claude plugin marketplace list in Claude Code or ask the agent to show the current Firebase project. If the firebase-basics skill fired, the agent starts by checking the CLI version and the account sign-in.

Official Firebase plugin for agents: 14 skills on Firestore, Auth, Hosting, Crashlytics, Remote Config and security rules

510 ★ on the repository
Last commit Nov 9, 2026
Apache-2.0

Plugin OfficialEditors’ pick

firebase/agent-skillsAuthor:Firebase

Install

Works in: Claude Code
Codex
Cursor
Gemini CLI
GitHub Copilot
Windsurf

In your terminal, with SkillFoxx CLI

npx skillfoxx add plugins/firebase-agent-skills

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

The agent signs in to a Google account through the Firebase CLI and gets access to all your Firebase projects.
The skills deploy sites, rules and Remote Config settings, so a mistake reaches a production project.

This is third-party code. Review the repository files before installing.

What it does

Firebase Agent Skills is a set of 14 skills from the Firebase team that teaches an agent to work with the platform from current documentation. The skills cover the CLI and account login, Firestore and security rules, Authentication, Hosting and App Hosting, Data Connect, Crashlytics, Remote Config, analytics and the Firebase AI Logic features. Separate skills migrate Firebase Extensions to Cloud Functions and set up an Xcode project. The skills are narrow, and each description says when not to call it: `firebase-basics` only handles login, project creation and app configuration files. The `firebase-security-rules-auditor` skill checks Firestore and Cloud Storage rules: it looks for bypasses through the gap between `create` and `update`, role spoofing and resource exhaustion. The repository holds plugin manifests for Claude Code, Codex, Cursor and Kimi, a Gemini CLI extension and an MCP server configuration for `firebase-tools`.

Who it is for. Web and mobile developers on Firebase who hand project setup, Firestore rules and deployment to Claude Code, Cursor or Codex.

Good fit when

A new Firebase project is created from scratch, and the agent must sign in, pick the project and download `google-services.json`.
Firestore rules go through a bypass and privilege escalation check before release.
A static site or SPA ships to Hosting with a preview channel and a custom domain.
App crashes are triaged through Crashlytics and flags roll out through Remote Config.

Not a fit when

The backend runs on another cloud: the skills know only Firebase services.
The agent must not get a Google account sign-in with access to production projects.
Only the MCP server is wanted without instructions: a separate card covers `firebase-tools` for that.

Example request

Audit firestore.rules for bypasses through update and list the vulnerabilities found with line numbers.

Limitations

Most skills work through the Firebase CLI, which runs with `npx -y firebase-tools@latest` and requires a Google account sign-in. In an environment without a browser, sign-in goes through `login --no-localhost`. The `firebase-basics` skill insists on the full set: if only it is available, the agent must install the rest following the guide for its environment. The MCP configuration pins `firebase-tools@15.32.1`, and Hosting and App Hosting have separate skills, so the agent must pick the right one. For Cursor, Windsurf and Copilot, manual copying depends on that agent's rules directory.

How to disable. In Claude Code run `claude plugin uninstall firebase@firebase`. Remove skills installed through `npx skills` with the same CLI or by hand from the agent's skills directory, and close the Firebase CLI session with `firebase logout`.

FAQ

How do I install the plugin in Claude Code?

Run `claude plugin marketplace add firebase/skills`, then `claude plugin install firebase@firebase`. Check the installation with `claude plugin marketplace list`.

How do I install the skills in Codex, Cursor or Gemini CLI?

For Codex run `codex plugin marketplace add firebase/skills` and `codex plugin add firebase@firebase`. For Gemini CLI run `gemini extensions install https://github.com/firebase/skills`. Other agents can use `npx skills add firebase/skills`.

Do I need to install the Firebase CLI separately?

No, the skills call it through `npx -y firebase-tools@latest`. The agent first checks the version with the `--version` flag, then the account sign-in.

How does the rules audit skill differ from the others?

It only reads Firestore and Cloud Storage rules and lists vulnerabilities: a bypass through `update`, owner spoofing and missing type and size checks. It performs no deployment.

How do I check the installed skills?

Run `claude plugin marketplace list` in Claude Code or ask the agent to show the current Firebase project. If the `firebase-basics` skill fired, the agent starts by checking the CLI version and the account sign-in.

Discussion

No questions or reviews yet.

Plugins

Laravel Agent Skills

laravel-agent-skills

Official

Laravel's official skill collection for Claude Code and Cursor: plugins for Laravel, Laravel Cloud and Nightwatch

PluginExtended access737

CloudBase Agent Skills

Thirty-two Tencent CloudBase skills: serverless functions, auth, AI models, storage and backend deployment in the cloud.

SkillExtended access81

.NET Agent Skills

Editors’ pick

Official skills and agents from the .NET team: performance, MSBuild, NuGet, upgrades, testing, ASP.NET Core, Blazor and MAUI

PluginExtended access6K

Firebase MCP Server

Firebase CLI and MCP Server

Official

Official Firebase MCP server from the Firebase CLI: projects, Firestore, Auth, Crashlytics, Remote Config and function logs

MCP serverBroad access4.5K

Webhook Skills

Hundreds of per-provider skills teach an agent to receive webhooks, verify signatures and handle events, with code examples.

SkillMinimal access101

MongoDB Agent Skills

Official MongoDB skills for natural-language queries, schema design, indexing, Atlas Search and driver connection setup

SkillExtended access198

README in short

Installation is described in eight variants: the `skills` CLI, a Gemini CLI extension, Claude, Codex and Kimi plugins, manual copying, a local path and a symlink for skill development. The license is Apache 2.0 and contributions come through pull requests.

README badge

Original SKILL.md

---
name: firebase-basics
description: >-
  Provides foundational Firebase CLI setup, CLI installation, version checks (`firebase-tools@latest --version`), CLI login (including --no-localhost), project creation, project selection (`firebase use`), and app config file downloads (`google-services.json`, `GoogleService-Info.plist`). Use ONLY for CLI login, project creation/switching, or downloading app config files. Don't use for Firebase Hosting deploy, Firestore, Auth, App Hosting, Data Connect, Crashlytics, or Remote Config.
metadata:
  author: Google LLC
  category: CloudInfrastructureAndServices
  version: "1.0.0"
---

# Prerequisites

Complete these setup steps before proceeding:

1. **Local Environment Setup:** Verify the environment is properly set up so we
   can use Firebase tools:

   - Run `npx -y firebase-tools@latest --version` to check if the Firebase CLI
     is installed.
   - Verify if the Firebase MCP server is installed using your existing tools.
   - **CRITICAL**: Before configuring any extensions or agent environments
     below, you MUST read
     [references/local-env-setup.md](references/local-env-setup.md).
   - **DO NOT SKIP** this step: if 'firebase-basics' is the only Firebase skill
     available to you, you must follow the reference for your agent environment
     to set up the full suite of Firebase skills:
     - **Gemini CLI**: Review
       [references/setup/gemini_cli.md](references/setup/gemini_cli.md)
     - **Antigravity**: Review
       [references/setup/antigravity.md](references/setup/antigravity.md)
     - **Android Studio**: Review
       [references/setup/android_studio.md](references/setup/android_studio.md)
     - **Claude Code**: Review
       [references/setup/claude_code.md](references/setup/claude_code.md)
     - **Cursor**: Review
       [references/setup/cursor.md](references/setup/cursor.md)
     - **GitHub Copilot**: Review
       [references/setup/github_copilot.md](references/setup/github_copilot.md)
     - **Other Agents**: Review
       [references/setup/other_agents.md](references/setup/other_agents.md)

1. **Authentication:** Ensure you are logged in to Firebase so that commands
   have the correct permissions. Run `npx -y firebase-tools@latest login:list`
   first; if not logged in, run `npx -y firebase-tools@latest login`. For
   environments without a browser (e.g., remote shells), use

Report a problem