better-auth
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure credential management by instructing users to store sensitive keys like
BETTER_AUTH_SECRETand OAuth secrets in environment variables rather than hardcoding them. - [SAFE]: Implementation guides for Two-Factor Authentication (TOTP), Passkeys (WebAuthn), and Rate Limiting demonstrate a clear alignment with industry-standard security protocols to prevent account takeover and brute-force attacks.
- [SAFE]: The skill references and utilizes legitimate, well-known libraries such as
better-auth,drizzle-orm,prisma, andkysely, posing no significant supply chain risk. - [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or unauthorized command execution was found across the documentation and code samples.
Audit Metadata