better-auth-best-practices
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (MEDIUM): The skill references
@better-auth/cli@latestto be executed vianpx. This fetches the latest version of the package from the public npm registry at runtime. - Evidence: Found in CLI Commands section:
npx @better-auth/cli@latest migrateandnpx @better-auth/cli@latest generate. - [REMOTE_CODE_EXECUTION] (MEDIUM): Use of
npxallows for the immediate execution of remote scripts on the local machine. - Evidence: Found in CLI Commands section:
npx @better-auth/cli mcp --cursor. - [COMMAND_EXECUTION] (LOW): The skill provides commands for local shell execution to perform migrations and configuration.
- Evidence:
openssl rand -base64 32and variousnpxcommands.
Audit Metadata