engineering-betterauth-integration
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements authentication using industry-standard libraries (BetterAuth, Drizzle ORM) and follows secure design principles, such as separating auth sessions from game sessions and recommending cookie-based sessions over stateless JWTs for better server-side control.
- [SAFE]: Sensitive configuration data, including OAuth client IDs and secrets for Discord, Google, GitHub, and Twitch, is managed through environment variables (
process.env), preventing hardcoded credentials. - [SAFE]: The skill includes pre-configured rate limiting rules for sensitive endpoints like
/sign-in/emailand/sign-up/emailto protect against brute-force and credential-stuffing attacks. - [SAFE]: Role-based access control (RBAC) is implemented with a clear hierarchy and permission mapping, ensuring that only authorized users (players, moderators, admins) can access specific game or management resources.
Audit Metadata