CtrlK
BlogDocsLog inGet started
Tessl Logo

firebase-auth-basics

Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.

63

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/firebase-auth-basics/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

67%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is well-structured with concrete provisioning commands and clean progressive disclosure to reference files. It loses points mainly for over-explaining concepts Claude already knows and lacking an explicit validation checkpoint in the deploy workflow.

Suggestions

Trim the Core Concepts section (Users, Tokens) to essentials Claude does not already know, or move it into a reference file.

Add an explicit verification step after `deploy --only auth` (e.g., confirm providers appear in the Console or re-run a status check) to strengthen the workflow's feedback loop.

Either reference ios_setup.md in the Client Setup section or remove the unused file so the bundle structure stays consistent.

DimensionReasoningScore

Conciseness

The body is mostly efficient and delegates detail to references, but the Core Concepts section explains basics Claude already knows ('A user is an entity that can sign in', what ID/refresh tokens are), fitting anchor 3 rather than 4.

3 / 5

Actionability

Provides concrete, executable guidance for provisioning (firebase.json auth block and `npx -y firebase-tools@latest deploy --only auth`) with numbered console steps; minor gaps because client usage is delegated to references, matching anchor 4.

4 / 5

Workflow Clarity

Clear numbered sequence (Provisioning -> Client Setup -> Security Rules) with CRITICAL guardrails on the deploy step, but no explicit validation/verify checkpoint; the operation is not destructive or batch so the cap does not apply, fitting anchor 4.

4 / 5

Progressive Disclosure

Well-signaled one-level-deep references to real files (client_sdk_web.md, flutter_setup.md, client_sdk_android.md, security_rules.md) with organized sections, but Core Concepts is inlined and ios_setup.md is unreferenced, so it stops at anchor 4 rather than 5.

4 / 5

Total

15

/

20

Passed

Description

82%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is strong: it explicitly covers both what the skill does and when to use it with concrete, natural trigger phrases tied to a distinct niche. Its only weakness is slightly generic action verbs and a few missing common synonyms (login, authentication).

Suggestions

Replace the generic verbs 'setting up and using' with more concrete actions (e.g., 'Enable sign-in providers, configure auth rules, and deploy auth config').

Add common trigger synonyms such as 'login', 'sign up', or 'authentication' alongside 'user sign-in' to broaden natural keyword coverage.

DimensionReasoningScore

Specificity

Names the domain (Firebase Authentication) and concrete capabilities (user sign-in, user management, secure data access via auth rules), but the verbs 'setting up and using' are generic and coverage is not comprehensive, matching anchor 3 rather than 4.

3 / 5

Completeness

Explicitly answers both 'what' (guide for setting up and using Firebase Authentication) and 'when' with concrete trigger phrases ('Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules'), matching anchor 5.

5 / 5

Trigger Term Quality

Includes natural phrases users would say ('user sign-in', 'user management', 'secure data access', 'auth rules') with good coverage, but misses common synonyms like 'login', 'sign up', or 'authentication', fitting anchor 4.

4 / 5

Distinctiveness Conflict Risk

Targets a clear niche (Firebase Authentication) with distinct, auth-specific triggers and minimal overlap risk with other skills, matching anchor 5.

5 / 5

Total

17

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository
firebase/agent-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.