Skip to content
← Tools / Skills
Skill · .md packageTrail of Bits/10 trustVerified

firebase-apk-scanner

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed…

Visit official site →

About

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. Use when analyzing APK files for Firebase vulnerabilities, performing mobile app security audits, or testing Firebase endpoint security. For authorized security research only.

argument-hint: [apk-file-or-directory]

allowed-tools: Bash({baseDir}/scanner.sh:) Bash(apktool:) Bash(curl:*) Read Grep Glob

disable-model-invocation: true

What it can do

  • Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. Use when analyzing APK files for Firebase vulnerabilities, performing mobile app security audits, or testing Firebase endpoint security. For authorized security research only.
  • argument-hint: [apk-file-or-directory]
  • allowed-tools: Bash({baseDir}/scanner.sh:*) Bash(apktool:*) Bash(curl:*) Read Grep Glob
  • disable-model-invocation: true

Setup

  1. Install: npx skills add trailofbits/skills --all
  2. The skill auto-loads when relevant, or invoke it by name in your agent.

Prerequisites

A compatible AI coding agent (Claude Code, Cursor, etc.).

Use cases

codesecuritydata

Works with

Claude CodeAny agent (.md)

Trust score — 9/10

/10 trustVerified

Trail of Bits is a top-tier security research firm; their skills are professional-grade auditing and fuzzing playbooks used by their own engineers. Open source.

Sources

Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.