2 results for tag "firestore-security-rules-auditor"
Red-team style auditor for Firebase/Firestore security rules that actively tries to bypass rules — checking update bypasses, authority sources for role/isAdmin fields, data-type integrity, and business-logic alignment. Use when Firestore security rules are created or updated to confirm they are secure and robust.
A Firebase skill that enables AI coding agents to audit and validate Firestore security rules, helping developers identify misconfigurations and enforce proper access control patterns in their Firebase projects.