Skip to main content

local-development

Facilitates local development by running web apps and functions, troubleshooting issues, and managing Storybook for testing.

Install this skill

or
67/100

Security score

The local-development skill was audited on Feb 12, 2026 and we found 9 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 24

Access to .env file

SourceSKILL.md
242. Copies `.env.dev` to `dist/apps/functions/.env`
medium line 63

Access to .env file

SourceSKILL.md
63The Firebase emulator is not finding the `.env` file. This happens when:
medium line 64

Access to .env file

SourceSKILL.md
64- The build clears `dist/apps/functions/` before the `.env` is copied
medium line 79

Access to .env file

SourceSKILL.md
79- Firebase reads `.env` from `dist/apps/functions/`
medium line 81

Access to .env file

SourceSKILL.md
81- The serve command copies `.env.dev` after build, before starting the emulator
medium line 82

Access to .env file

SourceSKILL.md
82- If ordering is wrong or stale processes exist, the emulator starts without the `.env`
low line 86

Access to .env file

SourceSKILL.md
86i functions: Loaded environment variables from .env.
low line 34

External URL reference

SourceSKILL.md
34Runs on http://localhost:3000
low line 40

External URL reference

SourceSKILL.md
40# Opens http://localhost:6006
Scanned on Feb 12, 2026
View Security Dashboard
Installation guide →