better-auth
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard authentication patterns and provides code templates for securing API endpoints using Better Auth and TRPC.
- [SAFE]: Sensitive information like API secrets and client IDs are correctly managed via environment variables (
serverEnv.*) rather than being hardcoded in the skill body. - [SAFE]: Authorization logic includes multiple layers of checks, verifying both session existence and specific database-level permissions (e.g., organization or project roles).
- [SAFE]: The provided code snippets demonstrate the use of schema validation for all incoming procedure inputs, mitigating common injection risks through structured data validation.
Audit Metadata