skills/ma1orek/replay/better-auth/Gen Agent Trust Hub

better-auth

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill manages authentication flows which process untrusted user input such as email addresses, names, and social profile data. Evidence: Documentation in SKILL.md and references/react-client-hooks.tsx covers sign-in and sign-up methods. The skill includes security hardening for these ingestion points, specifically mentioning SAML XML parser hardening and OIDC timestamp validation.
  • [COMMAND_EXECUTION]: The skill contains reference scripts and setup instructions that involve standard CLI operations for Cloudflare environment configuration. Evidence: scripts/setup-d1-drizzle.sh uses wrangler for database and secret management, and openssl for secure secret generation.
  • [EXTERNAL_DOWNLOADS]: The skill references and automates the installation of standard, well-known Node.js packages for authentication and database management. Evidence: Official packages like better-auth, drizzle-orm, and hono are included in the setup instructions in commands/setup.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 11:45 AM