CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

firebase

Firebase Firestore, Auth, Storage, real-time listeners, security rules

54

Quality

68%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/firebase/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

57%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A dense, highly actionable Firebase reference with strong copy-paste-ready code for data modeling, security rules, auth, functions, and testing. Its weaknesses are length and monolithic structure: known boilerplate inflates token cost, there is no reference-file split, and workflows lack explicit validation checkpoints despite covering risky database operations.

Suggestions

Split large topical blocks (security rules, Cloud Functions, auth) into references/ files and keep a concise overview with well-signaled one-level-deep links in SKILL.md.

Trim boilerplate Claude already knows (basic email/password auth flows, the helloWorld HTTP function) and keep only Firebase-specific patterns and pitfalls.

Add an explicit ordered workflow with validation checkpoints, e.g. 'write rules → test with emulator (`firebase emulators:start` + rules-unit-testing) → fix and re-test → only then `firebase deploy --only firestore`'.

Fix minor code gaps: define `docRef` in the offline-persistence snippet and add missing React, `fs`, and `FieldValue` imports.

DimensionReasoningScore

Conciseness

The body is almost entirely code with terse comments and no padded prose, but it spans ~740 lines and inlines boilerplate Claude already knows (basic signUp/signIn/signOut flows, a 'Hello from Firebase!' HTTP function, elementary CRUD) that could be trimmed.

3 / 5

Actionability

Nearly all guidance is concrete, executable code — full SDK initialization, a complete firestore.rules file, rules-unit-testing tests, transactions, batch writes, index configs, and CLI commands. Minor gaps exist: `docRef` is undefined in the offline-persistence snippet, React/`fs`/`FieldValue` imports are missing in a few examples.

4 / 5

Workflow Clarity

The content is organized topically rather than as a sequenced workflow; setup (install → init → emulators) and 'Test Rules Locally' exist, but there are no explicit validate-then-proceed checkpoints, and database/rules operations lack the feedback loops the rubric requires (capping this at 3).

3 / 5

Progressive Disclosure

Section headers and tables make the body navigable, but it is a 740-line monolith with no bundle files at all — the security rules, auth, and Cloud Functions material that clearly belongs in separate reference files is fully inlined.

3 / 5

Total

13

/

20

Passed

Description

66%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A keyword-dense description that clearly identifies the Firebase domain and its main components, but it is a bare capability list rather than a sentence with action verbs. Its main weakness is the complete absence of a 'Use when...' trigger clause, which caps completeness.

Suggestions

Add an explicit trigger clause, e.g. 'Use when working with Firebase services, Firestore queries, Firebase Auth, Storage rules, or files like firestore.rules and firebase.json'.

Convert the noun list into concrete actions, e.g. 'Models Firestore data, writes security rules, implements real-time listeners and Firebase Auth flows'.

Include natural synonyms users say, such as 'authentication', 'cloud functions', and 'emulators', to broaden trigger-term coverage.

DimensionReasoningScore

Specificity

The description lists several concrete capabilities ("Firestore, Auth, Storage, real-time listeners, security rules") spanning the Firebase stack, though they are stated as nouns rather than actions and omit capabilities present in the body (Functions, Hosting, emulators).

4 / 5

Completeness

The 'what' is clear from the enumerated capabilities, but there is no 'Use when...' clause or equivalent explicit trigger guidance in the description, which caps completeness at 3.

3 / 5

Trigger Term Quality

Includes natural terms users would say ("Firebase", "Firestore", "security rules", "real-time listeners"), but misses common variations such as "authentication", "cloud functions", or "emulators".

4 / 5

Distinctiveness Conflict Risk

"Firebase" anchors a clear niche unlikely to trigger the wrong skill, but the generic component terms "Auth" and "Storage" create minor overlap risk with standalone auth/storage skills.

4 / 5

Total

15

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (748 lines); consider splitting into references/ and linking

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository

alinaqi/maggy

Path

skills/firebase/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.