tanstack-start-auth
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides guidance on implementing robust authentication and authorization. It emphasizes a 'Data Boundary' approach where security is enforced at the server-side function or API handler level, separate from client-side route redirects.
- [SAFE]: It incorporates defensive programming techniques, such as recommending
timingSafeEqualfor secret comparisons to mitigate side-channel attacks. - [SAFE]: The skill includes instructions for preventing sensitive server-side logic (such as database adapters) from being bundled into the client-side application.
- [SAFE]: It references an automated linting pattern designed to ensure no server-side endpoint is accidentally left public without a documented reason.
- [EXTERNAL_DOWNLOADS]: The skill mentions downloading and installing the
better-authpackage and its associated CLI. These are the primary libraries for the skill's stated purpose and are sourced from standard package registries. - [COMMAND_EXECUTION]: Instructions include using
bunx @better-auth/clifor database migrations and schema management. This is routine developer activity for the described toolset.
Audit Metadata