firebase-security-rules-auditor

Audits Firestore security rules by scoring them on a 1-5 scale and flagging specific vulnerabilities. It checks for update bypasses, privilege escalation, missing type validation, resource exhaustion risks, and gaps between identity-level and field-level access control. Firestore rules are easy to get wrong in subtle ways, like allowing valid creates but unsafe updates, and a structured red-team checklist catches issues that manual review tends to miss.