Why use this instead of writing rules manually?

It ensures best practices like 'default deny' are followed and provides reusable helper functions that make complex security logic more readable and easier to maintain.

How does this skill help with Firestore security?

It provides pre-verified patterns for common security scenarios like multi-tenancy and RBAC, reducing the risk of unauthorized data access due to configuration errors.

Does it support custom claims?

Yes, it includes specific implementation patterns for verifying user roles, permissions, and tenant IDs via Firebase Auth custom claims directly within your rules.

Can I use this for data validation?

Absolutely. It generates rules for checking data types, string lengths, required fields, and preventing updates to immutable fields like 'createdAt' or 'authorId'.

Does it include support for testing rules locally?

Yes, the skill provides templates and strategies for using the @firebase/rules-unit-testing library to verify your security logic before deploying to production.

Firestore Security Rules Generator

Name: Firestore Security Rules Generator
Author: Agentient

byAgentient

Seguridad y Pruebas

Generates robust, production-ready Firestore security rules with patterns for RBAC, multi-tenancy, and schema validation.

Acerca de

This skill provides specialized guidance and implementation patterns for Google Cloud Firestore security rules, helping developers transition from basic setups to enterprise-grade security. It offers a comprehensive library of tested templates for user-scoped access, Role-Based Access Control (RBAC) via custom claims, and strict multi-tenant isolation strategies. Beyond simple access, the skill facilitates advanced data integrity through field-level validation, enum enforcement, and immutable field protection, while providing a clear framework for local testing using the Firebase Emulator Suite.

Características Principales

Implements strict data type and field-level validation logic
Provides reusable helper functions for cleaner rules syntax
Enforces immutable fields and relationship integrity checks
Generates granular RBAC and multi-tenant access patterns
Includes boilerplate for local rule testing and deployment
0 GitHub stars

Casos de Uso

Validating incoming document data structures at the database level
Securing a multi-tenant SaaS application on Firebase
Implementing complex role-based permissions for enterprise apps

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add agentient/vibekit firestore-security-rules-generation

For use in Claude.ai and ChatGPT

Download Skill

GitHub