better-auth
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and standard integration patterns for Better Auth, a well-known authentication framework. All identified patterns follow industry best practices for secure web application development.
- [CREDENTIALS_SAFE]: The skill correctly instructs users to manage secrets via environment variables and provides a template (
assets/env.example) with placeholders only. It also includes instructions for generating strong secrets using cryptographically secure methods likeopenssl rand. - [COMMAND_EXECUTION]: Shell commands provided in the instructions and scripts are limited to routine development tasks such as package installation (
npm install) and database schema migrations (npx drizzle-kit). No dangerous or arbitrary command execution patterns were found. - [EXTERNAL_DOWNLOADS]: All external dependencies (Better Auth, Drizzle ORM, NestJS) are well-known, established packages from the official NPM registry. Documentation links point to the official domains of these technologies.
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for handling user authentication data. While this represents a standard input surface, the skill utilizes a dedicated authentication library that manages data validation and secure password hashing.
- Ingestion points: User sign-in/sign-up forms and OAuth callback endpoints.
- Boundary markers: Standard application logic boundaries.
- Capability inventory: Database persistence and session management.
- Sanitization: Handled by the underlying Better Auth framework.
Audit Metadata