better-auth

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive and standard integration patterns for Better Auth, a well-known authentication framework. All identified patterns follow industry best practices for secure web application development.
  • [CREDENTIALS_SAFE]: The skill correctly instructs users to manage secrets via environment variables and provides a template (assets/env.example) with placeholders only. It also includes instructions for generating strong secrets using cryptographically secure methods like openssl rand.
  • [COMMAND_EXECUTION]: Shell commands provided in the instructions and scripts are limited to routine development tasks such as package installation (npm install) and database schema migrations (npx drizzle-kit). No dangerous or arbitrary command execution patterns were found.
  • [EXTERNAL_DOWNLOADS]: All external dependencies (Better Auth, Drizzle ORM, NestJS) are well-known, established packages from the official NPM registry. Documentation links point to the official domains of these technologies.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides templates for handling user authentication data. While this represents a standard input surface, the skill utilizes a dedicated authentication library that manages data validation and secure password hashing.
  • Ingestion points: User sign-in/sign-up forms and OAuth callback endpoints.
  • Boundary markers: Standard application logic boundaries.
  • Capability inventory: Database persistence and session management.
  • Sanitization: Handled by the underlying Better Auth framework.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 09:08 PM
Security Audit — agent-trust-hub — better-auth