better-auth-integration

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing official packages from the NPM registry, specifically @dodopayments/better-auth and dodopayments, which are official vendor resources, alongside the well-known better-auth library.- [CREDENTIALS_UNSAFE]: The documentation correctly guides users to manage sensitive API and webhook keys via environment variables (process.env) rather than hardcoding them into the application code.- [INDIRECT_PROMPT_INJECTION]: The skill handles data from authentication providers and payment webhooks. Evidence chain: (1) Ingestion points: Better Auth user objects and Dodo Payments webhook payloads in SKILL.md. (2) Boundary markers: Verification of webhook signatures is performed using a secret key. (3) Capability inventory: The skill enables client-side redirects for checkout and customer portal access, and submits usage data. (4) Sanitization: Relies on official plugin-based session management and signature verification.- [COMMAND_EXECUTION]: Provides standard implementation logic for browser-based redirects to vendor-hosted checkout and management portals.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 12:31 PM