How does this skill help with RBAC?

It provides standardized patterns for checking custom auth claims within your Firestore rules, allowing for granular roles such as admin, moderator, or editor.

Does it support multi-tenant security?

Absolutely. It focuses on user-scoped access patterns where document access is strictly restricted to the authenticated owner's UID.

Can I enforce specific data types with these rules?

Yes, the skill generates rules that validate field types (string, int, etc.), string length limits, and the presence of required fields during document creation.

Does it follow security best practices?

Yes, it defaults to 'deny' and uses helper functions to ensure rules are both highly secure and easy to maintain.

Firestore Security Rules Generator

Name: Firestore Security Rules Generator
Author: Agentient

byAgentient

Gestión de Bases de Datos

Generates secure, production-ready Firestore security rules for user-scoped access and role-based control.

Acerca de

This skill automates the creation of robust Firebase Firestore security rules, enabling developers to implement user-scoped data access, role-based access control (RBAC) via custom claims, and strict field validation patterns. By following 'default-deny' principles and providing pre-built templates for common scenarios like owner-only access and immutable fields, it ensures database integrity and prevents unauthorized data exposure in serverless applications.

Características Principales

Implementation of immutable field patterns for audit-ready data
User-scoped data access templates for private document protection
Advanced field validation including type checking and size constraints
Automated RBAC pattern generation using custom authentication claims
0 GitHub stars
Modular helper functions for reusable and readable security logic

Casos de Uso

Implementing administrative dashboards with specific moderator and admin permissions
Enforcing strict data integrity by preventing modifications to system fields like createdAt
Securing multi-tenant SaaS applications where users can only access their own data

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add agentient/vibekit firestore-security-rules-generation

For use in Claude.ai and ChatGPT

Download Skill

GitHub