create-auth-skill
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates the setup and configuration of the Better Auth framework, a well-known TypeScript authentication library. References are directed to the official GitHub repository and documentation site.
- [COMMAND_EXECUTION]: Instructions include the use of the
@better-auth/cliviabun xfor database migrations and schema generation. This is the standard, documented method for managing the framework's database requirements. - [CREDENTIALS_UNSAFE]: The skill provides examples of sensitive environment variables such as
BETTER_AUTH_SECRETandDATABASE_URL. It correctly follows security best practices by instructing the user to store these in.envfiles rather than hardcoding them, and provides a command for generating a secure random secret. - [INDIRECT_PROMPT_INJECTION]: The skill uses automated scanning of project files (like
package.jsonand framework config files) to detect the environment and pre-fill setup questions. While this involves processing untrusted data, it is a standard and necessary function for a scaffolding utility, and the results are presented to the user for confirmation before implementation.
Audit Metadata