nextjs-better-auth-postgres-docker
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill uses placeholders and instructions for generating secure secrets (e.g.,
openssl rand -base64 32) for production environments. While default credentials liketodo_passare provided in the local development Docker Compose file, this is standard practice for local isolation and the skill correctly directs users to Secret Manager for production deployment. - [COMMAND_EXECUTION]: The skill includes various shell commands for
gcloud,docker, andpnpm. These commands are standard for infrastructure setup and application management as described in the skill's purpose. No suspicious or obfuscated commands were detected. - [EXTERNAL_DOWNLOADS]: The skill references standard package installations via
pnpmand official Docker images from Docker Hub (node:22-alpine,postgres:16). These are well-known and trusted sources for the specified technology stack. - [DATA_EXFILTRATION]: No patterns of data exfiltration or unauthorized network operations were found. The network configurations described are strictly for connecting the application to its database and Google Cloud services.
Audit Metadata