Why use this instead of writing rules manually?

It ensures best practices like 'default deny' are followed and provides reusable helper functions that make complex security logic more readable and easier to maintain.

How does this skill help with Firestore security?

It provides pre-verified patterns for common security scenarios like multi-tenancy and RBAC, reducing the risk of unauthorized data access due to configuration errors.

Does it support custom claims?

Yes, it includes specific implementation patterns for verifying user roles, permissions, and tenant IDs via Firebase Auth custom claims directly within your rules.

Can I use this for data validation?

Absolutely. It generates rules for checking data types, string lengths, required fields, and preventing updates to immutable fields like 'createdAt' or 'authorId'.

Does it include support for testing rules locally?

Yes, the skill provides templates and strategies for using the @firebase/rules-unit-testing library to verify your security logic before deploying to production.

Firestore Security Rules Generator

Name: Firestore Security Rules Generator
Author: Agentient

byAgentient

0•

Security & Testing

Generates robust, production-ready Firestore security rules with patterns for RBAC, multi-tenancy, and schema validation.

This skill provides specialized guidance and implementation patterns for Google Cloud Firestore security rules, helping developers transition from basic setups to enterprise-grade security. It offers a comprehensive library of tested templates for user-scoped access, Role-Based Access Control (RBAC) via custom claims, and strict multi-tenant isolation strategies. Beyond simple access, the skill facilitates advanced data integrity through field-level validation, enum enforcement, and immutable field protection, while providing a clear framework for local testing using the Firebase Emulator Suite.

Key Features

01Implements strict data type and field-level validation logic

02Provides reusable helper functions for cleaner rules syntax

03Enforces immutable fields and relationship integrity checks

04Generates granular RBAC and multi-tenant access patterns

05Includes boilerplate for local rule testing and deployment

060 GitHub stars

Use Cases

01Validating incoming document data structures at the database level

02Securing a multi-tenant SaaS application on Firebase

03Implementing complex role-based permissions for enterprise apps

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add agentient/vibekit firestore-security-rules-generation

For use in Claude.ai and ChatGPT

Key Features

01Implements strict data type and field-level validation logic

02Provides reusable helper functions for cleaner rules syntax

03Enforces immutable fields and relationship integrity checks

04Generates granular RBAC and multi-tenant access patterns

05Includes boilerplate for local rule testing and deployment

060 GitHub stars

Use Cases

01Validating incoming document data structures at the database level

02Securing a multi-tenant SaaS application on Firebase

03Implementing complex role-based permissions for enterprise apps

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add agentient/vibekit firestore-security-rules-generation

For use in Claude.ai and ChatGPT