better-auth-integration
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official packages from the NPM registry, specifically
@dodopayments/better-authanddodopayments, which are official vendor resources, alongside the well-knownbetter-authlibrary.- [CREDENTIALS_UNSAFE]: The documentation correctly guides users to manage sensitive API and webhook keys via environment variables (process.env) rather than hardcoding them into the application code.- [INDIRECT_PROMPT_INJECTION]: The skill handles data from authentication providers and payment webhooks. Evidence chain: (1) Ingestion points: Better Auth user objects and Dodo Payments webhook payloads in SKILL.md. (2) Boundary markers: Verification of webhook signatures is performed using a secret key. (3) Capability inventory: The skill enables client-side redirects for checkout and customer portal access, and submits usage data. (4) Sanitization: Relies on official plugin-based session management and signature verification.- [COMMAND_EXECUTION]: Provides standard implementation logic for browser-based redirects to vendor-hosted checkout and management portals.
Audit Metadata