better-auth
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill manages authentication flows which process untrusted user input such as email addresses, names, and social profile data. Evidence: Documentation in
SKILL.mdandreferences/react-client-hooks.tsxcovers sign-in and sign-up methods. The skill includes security hardening for these ingestion points, specifically mentioning SAML XML parser hardening and OIDC timestamp validation. - [COMMAND_EXECUTION]: The skill contains reference scripts and setup instructions that involve standard CLI operations for Cloudflare environment configuration. Evidence:
scripts/setup-d1-drizzle.shuseswranglerfor database and secret management, andopensslfor secure secret generation. - [EXTERNAL_DOWNLOADS]: The skill references and automates the installation of standard, well-known Node.js packages for authentication and database management. Evidence: Official packages like
better-auth,drizzle-orm, andhonoare included in the setup instructions incommands/setup.md.
Audit Metadata