xoai/stack-flutter-firebase
tools/sage-claude-plugin/skills/stack-flutter-firebase/SKILL.md
Integration patterns for Flutter + Firebase + Riverpod — auth, Firestore, Cloud Functions, project structure
$ install --global
skillsauthnpx skillsauth add xoai/sage stack-flutter-firebaseInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 26, 2026, 2:10 AM174.4s1 file scanned
SKILL.md
- name:
- stack-flutter-firebase
- description:
- Integration patterns for Flutter + Firebase + Riverpod — auth, Firestore, Cloud Functions, project structure
- version:
- 1.0.0
- type:
- composite
- layer:
- stack
- sage:
- >=1.0.0
- detected:
- [flutter, firebase_core]
- tags:
- [flutter,firebase_core]
stack-flutter-firebase
Layer 3 — Stack Composition
Integration patterns for the most common Flutter fullstack combination: Flutter + Firebase (Auth, Firestore, Cloud Functions, Storage) + Riverpod.
Philosophy
Firebase documentation explains each service in isolation. Riverpod docs explain state management in isolation. Neither explains: how Firebase Auth state feeds into Riverpod providers, how Firestore streams compose with Riverpod's reactive model, how to structure a project where Firebase is the backend and Riverpod manages the entire state tree.
These seams are where this pack provides value.
What's Included
| Type | Files | Coverage | |------|-------|----------| | Integration | 4 | Firebase Auth + Riverpod, Firestore + Riverpod, Cloud Functions patterns, project structure | | Anti-patterns | 3 | Direct Firebase in widgets, unstructured Firestore, no security rules | | Constitution | 1 | 4 stack integration principles |
Related Skills
xoai/git-discipline
development
VerifiedTrustedCommunity
Branch-per-initiative git discipline for all delivery workflows. Defines branch naming by workflow, the propose-confirm creation protocol, dirty-tree and detached-HEAD handling, the always user-gated merge protocol, worktree support for parallel sessions, and abandonment cleanup. Activates only in git repositories — silently inactive everywhere else. Use when starting /build, /fix, /architect, or /build-x at Standard+ scope, when resuming an initiative, when offering a merge at a completion checkpoint, or when the user wants a second concurrent initiative.
18SKILL.mdUpdated Jun 13, 2026
xoai/build-loop
development
VerifiedTrustedCommunity
Drives task-by-task execution from an approved plan with quality gates between each task. Reads the plan, finds the next incomplete task, dispatches implementation, validates, updates progress, and continues. Use after a plan is approved and the user says "go", "start building", "execute the plan", or "implement the feature".
18SKILL.mdUpdated Apr 25, 2026
xoai/session-bridge
testing
VerifiedTrustedCommunity
Preserves and restores context across agent sessions using plan file checkboxes as source of truth. Use when starting a new session, resuming previous work, ending a session, or when the user says "continue from last time", "what was I doing", or "save progress".
18SKILL.mdUpdated Apr 25, 2026
xoai/sage-self-learning
tools
VerifiedTrustedCommunity
Captures agent mistakes, corrections, and discovered gotchas so they are not repeated. Use when: (1) a command or operation fails unexpectedly, (2) the user corrects the agent, (3) the agent discovers non-obvious behavior through debugging, (4) an API or tool behaves differently than expected, (5) a better approach is found for a recurring task. Also searches past learnings before starting tasks to avoid known pitfalls. Activate alongside the sage-memory skill — they share the same MCP backend but serve different purposes (sage-memory = codebase knowledge, sage-self-learning = agent mistakes and gotchas).
17SKILL.mdUpdated May 20, 2026