Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. Use when analyzing APK files for Firebase vulnerabilities, performing mobile app security audits, or testing Firebase endpoint security. For authorized security research only.
Install
npx skills add trailofbits/skills --skill firebase-apk-scannernpx skills add trailofbits/skills --skill firebase-apk-scanner -a claude-code -gnpx skills add trailofbits/skills --skill firebase-apk-scanner -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/firebase-apk-scanner/skills/firebase-apk-scannergh skill install trailofbits/skills firebase-apk-scannergit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/firebase-apk-scanner/skills/firebase-apk-scanner ~/.claude/skills/firebase-apk-scanner # Claude Code
cp -R /tmp/trailofbits__skills/plugins/firebase-apk-scanner/skills/firebase-apk-scanner ~/.agents/skills/firebase-apk-scanner # Codex, Cursor, Gemini CLI, Copilot, OpenCode