better-auth
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a high-quality instructional guide for the 'Better Auth' ecosystem, specifically targeting version 1.6.25. It aligns with official documentation and does not introduce any unexpected behaviors.
- [SAFE]: It correctly identifies and warns against the use of stale or insecure packages, such as the legacy @better-auth/cli, recommending the current 'auth' package instead to ensure users receive the latest security patches.
- [SAFE]: Security patterns provided in the documentation follow industry standards for authentication, including instructions for secure cookie handling (httpOnly, SameSite=Lax), rate limiting via Redis or database storage, and the principle of least privilege for user roles using 'additionalFields' constraints.
- [SAFE]: All external URLs and package references point to the official Better Auth documentation, GitHub repositories, and well-known package registries. No unauthorized network requests or data exfiltration patterns were detected.
Audit Metadata