Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/firebase/agent-skills/firebase-basicsnpx skills add firebase/agent-skills --skill firebase-basicsgit clone --depth 1 https://github.com/firebase/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/firebase/agent-skills/firebase-basics)<a href="https://agentmods.dev/skills/firebase/agent-skills/firebase-basics"><img src="https://agentmods.dev/badge/skills/firebase/agent-skills/firebase-basics.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00105 | $0.01689 |
| Opus 5 | $0.00053 | $0.00844 |
| Sonnet 5 | $0.00021 | $0.00338 |
| Haiku 4.5 | $0.00011 | $0.00169 |
Grade A, and why
firebase-basics scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
97% identical to firebase-basics — 240 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 149 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Prerequisites
Complete these setup steps before proceeding:
-
Local Environment Setup: Verify the environment is properly set up so we can use Firebase tools:
- Run
npx -y firebase-tools@latest --versionto check if the Firebase CLI is installed. - Verify if the Firebase MCP server is installed using your existing tools.
- CRITICAL: Before configuring any extensions or agent environments below, you MUST read references/local-env-setup.md.
- DO NOT SKIP this step: if 'firebase-basics' is the only Firebase skill
available to you, you must follow the reference for your agent environment
to set up the full suite of Firebase skills:
- Gemini CLI: Review references/setup/gemini_cli.md
- Antigravity: Review references/setup/antigravity.md
- Android Studio: Review references/setup/android_studio.md
- Claude Code: Review references/setup/claude_code.md
- Cursor: Review references/setup/cursor.md
- GitHub Copilot: Review references/setup/github_copilot.md
- Other Agents: Review references/setup/other_agents.md
- Run
-
Authentication: Ensure you are logged in to Firebase so that commands have the correct permissions. Run
npx -y firebase-tools@latest login. For environments without a browser (e.g., remote shells), usenpx -y firebase-tools@latest login --no-localhost.- The command should output the current user.
- If you are not logged in, follow the interactive instructions from this command to authenticate.
-
Active Project: Most Firebase tasks require an active project context.
[!IMPORTANT] For Agents: Before proceeding with project configuration, you MUST pause and ask the developer if they prefer to:
- Provide an existing Firebase Project ID, or
- Create a new Firebase project.
-
If using an existing Project ID:
-
Check the current project by running
npx -y firebase-tools@latest use. -
If the command outputs
Active Project: <project-id>, confirm with the user if this is the intended project. -
If not, or if no project is active, set the project provided by the user:
npx -y firebase-tools@latest use <PROJECT_ID>
-
-
If creating a new project: Run the following command to create it:
npx -y firebase-tools@latest projects:create <project-id> --display-name "<display-name>"Note: The
<project-id>must be 6-30 characters, lowercase, and can contain digits and hyphens. It must be globally unique.
What ships with it
19 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/android_setup.md 1.8 KB
- references/firebase-cli-guide.md 464 B
- references/firebase-service-init.md 692 B
- references/flutter_setup.md 4.7 KB
- references/ios_setup.md 4.0 KB
- references/local-env-setup.md 2.7 KB
- references/refresh/android_studio.md 1.3 KB
- references/refresh/antigravity.md 2.1 KB
- references/refresh/claude.md 380 B
- references/refresh/gemini-cli.md 482 B
- references/refresh/other-agents.md 2.2 KB
- references/setup/android_studio.md 658 B
- references/setup/antigravity.md 3.3 KB
- references/setup/claude_code.md 1.9 KB
- references/setup/cursor.md 3.0 KB
- references/setup/gemini_cli.md 2.0 KB
- references/setup/github_copilot.md 3.3 KB
- references/setup/other_agents.md 3.4 KB
- references/web_setup.md 1.6 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 149 lines · 105 tokens per session scan A a80bfcc76a21
firebase-basics is a skill published in the GitHub repository firebase/agent-skills (430 stars, last pushed 6d ago), licensed Apache-2.0. It adds 105 tokens to every session and 1,689 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. It is 97% identical to firebase-basics, differing in 240 lines, and is treated as a copy.
Other skills, from other repositories
huggingface-spaces
Build, deploy, and maintain applications on Hugging Face Spaces — Gradio / Docker / Static SDKs, ZeroGPU and dedicated hardware, model loading, debugging, buckets, inference providers, community grants. Use whenever the user asks to create or host an app on Hugging Face, port code onto ZeroGPU, fix a Space that won't…
ondb
A logical analysis and reasoning tool for AI. Use when decomposing documents into structured knowledge, querying entities and relations, validating consistency, or indexing files. Trigger on "remember", "what do I know about", "link X to Y", "show dependencies", "analyze this document", entity CRUD, or cross-skill…
cloud-architect
Designs cloud architectures, creates migration plans, generates cost optimization recommendations, and produces disaster recovery strategies across AWS, Azure, and GCP. Use when designing cloud architectures, planning migrations, or optimizing multi-cloud deployments. Invoke for Well-Architected Framework, cost…
kagent-dev
Development guide for kagent's v1alpha3 Harness and AgentTemplate CRDs, AgentInstance gRPC control plane, upstream A2A integration, Substrate runtime provisioning, tests, generation, and PR workflow. Use for any implementation, debugging, review, or CI task in the kagent repository.
timoni
Use when deploying applications to Kubernetes with Timoni. Covers installing and upgrading module instances from OCI registries, composing multi-app deployments with bundles, injecting values from clusters or CI with runtimes, targeting multiple clusters, and authoring, testing, signing and publishing modules with CUE.
azmon-mirroredcatalogs-operations-cli
Brings Azure Monitor, Application Insights, and Log Analytics telemetry into Fabric as Eventhouse external delta tables and correlates it with business data. Use to onboard observability data, judge whether latency or availability affected revenue, or build a Real-Time dashboard and Operations Agent over it.