create-auth-skill

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates the setup and configuration of the Better Auth framework, a well-known TypeScript authentication library. References are directed to the official GitHub repository and documentation site.
  • [COMMAND_EXECUTION]: Instructions include the use of the @better-auth/cli via bun x for database migrations and schema generation. This is the standard, documented method for managing the framework's database requirements.
  • [CREDENTIALS_UNSAFE]: The skill provides examples of sensitive environment variables such as BETTER_AUTH_SECRET and DATABASE_URL. It correctly follows security best practices by instructing the user to store these in .env files rather than hardcoding them, and provides a command for generating a secure random secret.
  • [INDIRECT_PROMPT_INJECTION]: The skill uses automated scanning of project files (like package.json and framework config files) to detect the environment and pre-fill setup questions. While this involves processing untrusted data, it is a standard and necessary function for a scaffolding utility, and the results are presented to the user for confirmation before implementation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 01:03 PM