better-auth
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as a documentation and utility hub for Better Auth, a legitimate open-source authentication framework. It emphasizes security best practices, such as using environment secrets and proper CORS configuration.\n- [COMMAND_EXECUTION]: The skill includes developer-facing utility scripts in the
scripts/directory.generate-secret.shusesopensslto create secure keys, andsetup-d1-drizzle.shprovides a transparent way to scaffold project files and run standardwrangleranddrizzle-kitcommands. These scripts are intended for manual execution and perform documented, benign tasks.\n- [EXTERNAL_DOWNLOADS]: Dependencies are standard, well-known libraries (e.g.,better-auth,drizzle-orm,hono) fetched from official registries like npm or bun. The skill correctly directs users to official documentation and repositories.\n- [CREDENTIALS_UNSAFE]: No hardcoded secrets or sensitive credentials were found. The skill provides clear instructions on using environment variables and Cloudflare secrets for secure credential management.
Audit Metadata