# firebase-apk-scanner

Scan Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. For authorized security research only.

- **Kind:** plugin (installs as one bundle)
- **Owner:** trailofbits
- **Source:** https://github.com/trailofbits/skills (`plugins/firebase-apk-scanner`)
- **Pinned commit:** `d3323cefbcf645678b8dc481de204b02ad3d02dc`
- **Page:** https://forefy.com/plugins/5b2414c7-b6f2-55e6-8af7-00227418660e
- **API (JSON):** https://forefy.com/api/asr/plugins/5b2414c7-b6f2-55e6-8af7-00227418660e

## Install

Ask your agent: `Install the firebase-apk-scanner plugin securely from: https://forefy.com/plugins/5b2414c7-b6f2-55e6-8af7-00227418660e globally to ~/.claude/skills`

Or run the pinned install script: `curl -fsSL https://forefy.com/api/asr/plugins/5b2414c7-b6f2-55e6-8af7-00227418660e/install | bash` (`?location=project` for the current project, `&shell=powershell` with `irm ... | iex`; `harness=agents` prints the Codex commands).

## Skills in this plugin (1)

- [firebase-apk-scanner](https://forefy.com/skills/dfe1069a-bf5a-4328-9fde-89f07a3e98ea): Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. Use w…