NYC

better-auth-plugins

Warn

Audited by Gen Agent Trust Hub on Feb 15, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS] (MEDIUM): The skill instructs the user to run database migration commands using npx @better-auth/cli.
  • Evidence: SKILL.md contains the commands npx @better-auth/cli generate and npx @better-auth/cli migrate.
  • Risk: Using npx to execute a package from the npm registry downloads and runs code at runtime. While better-auth is a known authentication library, it is not listed as a trusted source in this analyzer's security policy. This introduces a risk of remote code execution if the package or the registry were to be compromised.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 09:36 PM