Huckleberry

What to consider before installing: - The SKILL.md and code require HUCKLEBERRY_EMAIL/HUCKLEBERRY_PASSWORD or a credentials file (~/.config/huckleberry/credentials.json); the registry metadata does not list these — expect to supply secrets if you use it. - The script imports google.cloud.firestore and directly reads/writes Firestore documents (api._get_firestore_client()). That may cause the script to use Google Application Default Credentials (GOOGLE_APPLICATION_CREDENTIALS or gcloud user creds) if they exist — be careful: it can access other Google project credentials present on the host. - The package installation is a pip install from a GitHub repo (not a vetted PyPI release). Review the upstream py-huckleberry-api repo and the included scripts/hb.py source yourself before installing. - If you decide to use it: run in an isolated environment (dedicated VM/container or virtualenv), create a Huckleberry account with least-privilege credentials, avoid reusing sensitive Google credentials, and inspect the code paths that call Firestore to ensure writes are intended. - If you need a cleaner trust boundary, request the publisher add explicit metadata for required env vars/config paths and document the Firestore usage (why direct Firestore access is necessary) so you can assess risk more precisely.