Rules Desk - audit, plan and harden your Firestore security rules

Paste a Cloud Firestore security rules file. A free in-browser parser walks every match block, resolves the helper functions and reports what each path actually grants and to whom, with twenty-four checks. Then three metered stages over the same file: an audit with an open/leaky/tighten/sound verdict and a ten-check table, a plan for the custom auth claims the rules depend on and who must set them, and the complete file rewritten and hardened with emulator tests. Built from three Firebase agent skills and crediting all of them: @firebase/firebase-security-rules-auditor (audit), @firebase/firebase-firestore (harden) and @firebase/firebase-auth-basics (claims).

Every public app is built from a security-scanned skill and must pass a clean scan — skill and frontend — before it can be listed. Have a skill of your own? Turn it into an app — or read the step-by-step walkthrough.