api-auth-better-auth-drizzle-hono
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and patterns for the legitimate Better Auth library, emphasizing secure configuration.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill includes explicit warnings and 'Anti-Pattern' examples to prevent users from hardcoding secrets like BETTER_AUTH_SECRET or OAuth client secrets, instead directing them to use environment variables.
- [EXTERNAL_DOWNLOADS]: Mentions the use of 'npx auth@latest' and 'npx drizzle-kit', which are standard, legitimate developer tools for the technologies described.
- [INDIRECT_PROMPT_INJECTION]: As an authentication skill, it defines interfaces for ingesting user data (e.g., sign-up forms, organization names). The skill mitigates risks by promoting strict TypeScript safety and server-side verification.
- Ingestion points: Sign-up, sign-in, and organization creation logic in 'examples/core.md' and 'examples/organizations.md'.
- Boundary markers: Explicit usage of 'auth.$Infer.Session' for typed boundaries.
- Capability inventory: Database persistence via Drizzle and email notifications.
- Sanitization: Server-side validation of password lengths and email verification flows.
Audit Metadata