better-auth

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a reference guide for the 'better-auth' authentication library. The provided instructions and code snippets follow security best practices for authentication, such as using environment variables for secrets, implementing rate limiting, and handling session tokens securely.
  • [EXTERNAL_DOWNLOADS]: The skill mentions standard package installation commands for better-auth (npm, pnpm, yarn, bun). It also references official documentation and GitHub repositories. All external references target well-known and trusted platforms (npmjs.com, github.com, better-auth.com).
  • [COMMAND_EXECUTION]: The skill provides documentation on how to use the framework's CLI (npx auth migrate, npx auth generate). These are standard developer tools for the library and are used as intended for database management.
  • [DYNAMIC_EXECUTION]: The maintenance script scripts/check-updates.py is a utility tool for the skill author to check for version updates via the npm registry. It performs standard HTTP GET requests to the npm API and does not execute arbitrary remote code or ingest untrusted data into sensitive sinks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:29 AM
Security Audit — agent-trust-hub — better-auth