nextjs-better-auth-postgres-docker

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill uses placeholders and instructions for generating secure secrets (e.g., openssl rand -base64 32) for production environments. While default credentials like todo_pass are provided in the local development Docker Compose file, this is standard practice for local isolation and the skill correctly directs users to Secret Manager for production deployment.
  • [COMMAND_EXECUTION]: The skill includes various shell commands for gcloud, docker, and pnpm. These commands are standard for infrastructure setup and application management as described in the skill's purpose. No suspicious or obfuscated commands were detected.
  • [EXTERNAL_DOWNLOADS]: The skill references standard package installations via pnpm and official Docker images from Docker Hub (node:22-alpine, postgres:16). These are well-known and trusted sources for the specified technology stack.
  • [DATA_EXFILTRATION]: No patterns of data exfiltration or unauthorized network operations were found. The network configurations described are strictly for connecting the application to its database and Google Cloud services.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 05:43 AM
Security Audit — agent-trust-hub — nextjs-better-auth-postgres-docker