tanstack-start-auth

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides guidance on implementing robust authentication and authorization. It emphasizes a 'Data Boundary' approach where security is enforced at the server-side function or API handler level, separate from client-side route redirects.
  • [SAFE]: It incorporates defensive programming techniques, such as recommending timingSafeEqual for secret comparisons to mitigate side-channel attacks.
  • [SAFE]: The skill includes instructions for preventing sensitive server-side logic (such as database adapters) from being bundled into the client-side application.
  • [SAFE]: It references an automated linting pattern designed to ensure no server-side endpoint is accidentally left public without a documented reason.
  • [EXTERNAL_DOWNLOADS]: The skill mentions downloading and installing the better-auth package and its associated CLI. These are the primary libraries for the skill's stated purpose and are sourced from standard package registries.
  • [COMMAND_EXECUTION]: Instructions include using bunx @better-auth/cli for database migrations and schema management. This is routine developer activity for the described toolset.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 03:14 PM
Security Audit — agent-trust-hub — tanstack-start-auth