Skip to content
Back to skills

Firebase Mobile

ASecurity

Firebase backend services integration for mobile apps

  • 1,760 stars
  • 0 votes
  • 0 copies
  • 4 views
  • Added February 7, 2026
data-aijavascriptgojavaswiftkotlinbashtestingdatabasebackendsecurity

Works with

  • cli

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 2, 2026

npx -y skills add a5c-ai/babysitter --skill firebase-mobile --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Firebase Mobile?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Firebase Mobile
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/a5c-ai-firebase-mobile/badge)](https://www.skillsdirectory.com/skills/a5c-ai-firebase-mobile)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: Firebase Mobile
description: Firebase backend services integration for mobile apps
version: 1.0.0
category: Backend Services
slug: firebase-mobile
status: active
graph:
  domains: [domain:mobile]
  specializations: [specialization:mobile-development]
  skillAreas: [skill-area:push-notifications, skill-area:analytics-tracking]
  roles: [role:mobile-engineer]
  workflows: [workflow:feature-development, workflow:release-management]
  topics: [topic:accessibility]
---

# Firebase Mobile Skill

## Overview

This skill provides Firebase backend services integration for mobile applications. It enables configuration of Authentication, Firestore, Storage, Cloud Functions, and other Firebase services.

## Allowed Tools

- `bash` - Execute Firebase CLI commands
- `read` - Analyze Firebase configurations
- `write` - Generate security rules and configurations
- `edit` - Update Firebase implementations
- `glob` - Search for Firebase files
- `grep` - Search for patterns

## Capabilities

### Firebase Authentication

1. **Auth Methods**
   - Email/password authentication
   - OAuth providers (Google, Apple, Facebook)
   - Phone authentication
   - Anonymous authentication
   - Custom token authentication

2. **Auth State**
   - Handle auth state changes
   - Token refresh
   - Session persistence
   - Multi-factor authentication

### Cloud Firestore

3. **Database Operations**
   - Document CRUD operations
   - Collection queries
   - Real-time listeners
   - Batch operations
   - Transactions

4. **Security Rules**
   - Write Firestore rules
   - Test rules with emulator
   - Handle role-based access
   - Validate data structure

### Firebase Storage

5. **File Operations**
   - Upload files with progress
   - Download files
   - Generate download URLs
   - Handle metadata
   - Configure security rules

### Cloud Functions

6. **Function Integration**
   - Call HTTPS functions
   - Call callable functions
   - Handle function responses
   - Configure timeouts

### Remote Config

7. **Feature Flags**
   - Fetch remote config
   - Configure defaults
   - Handle fetch intervals
   - A/B testing setup

### Performance Monitoring

8. **Performance Tracking**
   - Automatic traces
   - Custom traces
   - Network request monitoring
   - Screen rendering metrics

## Target Processes

- `firebase-backend-integration.js` - Firebase integration
- `firebase-cloud-messaging.js` - Push notifications
- `mobile-analytics-setup.js` - Analytics

## Dependencies

- Firebase SDK
- Firebase CLI
- Google Cloud account

## Usage Examples

### Firebase Setup (iOS)

```swift
// AppDelegate.swift
import FirebaseCore
import FirebaseAuth
import FirebaseFirestore

@main
class AppDelegate: UIResponder, UIApplicationDelegate {
    func application(_ application: UIApplication,
                     didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]?) -> Bool {
        FirebaseApp.configure()
        return true
    }
}

// AuthService.swift
class AuthService: ObservableObject {
    @Published var user: User?
    private var handle: AuthStateDidChangeListenerHandle?

    init() {
        handle = Auth.auth().addStateDidChangeListener { [weak self] _, user in
            self?.user = user
        }
    }

    func signIn(email: String, password: String) async throws {
        try await Auth.auth().signIn(withEmail: email, password: password)
    }

    func signUp(email: String, password: String) async throws {
        try await Auth.auth().createUser(withEmail: email, password: password)
    }

    func signOut() throws {
        try Auth.auth().signOut()
    }
}
```

### Firestore Repository (Android)

```kotlin
// data/repository/PostRepository.kt
class PostRepository @Inject constructor(
    private val firestore: FirebaseFirestore
) {
    private val postsCollection = firestore.collection("posts")

    fun observePosts(): Flow<List<Post>> = callbackFlow {
        val listener = postsCollection
            .orderBy("createdAt", Query.Direction.DESCENDING)
            .addSnapshotListener { snapshot, error ->
                if (error != null) {
                    close(error)
                    return@addSnapshotListener
                }
                val posts = snapshot?.documents?.mapNotNull { it.toObject<Post>() } ?: emptyList()
                trySend(posts)
            }
        awaitClose { listener.remove() }
    }

    suspend fun createPost(post: Post): String {
        val docRef = postsCollection.add(post).await()
        return docRef.id
    }

    suspend fun updatePost(postId: String, updates: Map<String, Any>) {
        postsCollection.document(postId).update(updates).await()
    }

    suspend fun deletePost(postId: String) {
        postsCollection.document(postId).delete().await()
    }
}
```

### Security Rules

```javascript
// firestore.rules
rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    function isAuthenticated() {
      return request.auth != null;
    }

    function isOwner(userId) {
      return isAuthenticated() && request.auth.uid == userId;
    }

    match /users/{userId} {
      allow read: if isAuthenticated();
      allow write: if isOwner(userId);
    }

    match /posts/{postId} {
      allow read: if true;
      allow create: if isAuthenticated()
        && request.resource.data.authorId == request.auth.uid;
      allow update, delete: if isOwner(resource.data.authorId);
    }
  }
}
```

### Firebase Emulator

```bash
# Start emulators
firebase emulators:start

# Run with emulator in code
if ProcessInfo.processInfo.environment["USE_FIREBASE_EMULATOR"] == "YES" {
    Auth.auth().useEmulator(withHost: "localhost", port: 9099)
    Firestore.firestore().useEmulator(withHost: "localhost", port: 8080)
    Storage.storage().useEmulator(withHost: "localhost", port: 9199)
}
```

## Quality Gates

- Security rules tested with emulator
- Authentication flows verified
- Offline persistence tested
- Error handling comprehensive

## Related Skills

- `push-notifications` - FCM integration
- `mobile-analytics` - Firebase Analytics
- `mobile-security` - Security patterns

## Version History

- 1.0.0 - Initial release

Files in this skill

  • README.md1 KB
  • SKILL.md5.8 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.