better-auth
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation for Better Auth, a TypeScript authentication library. It covers secure implementation patterns including:
- Proper environment variable management for secrets (using
BETTER_AUTH_SECRET). - Implementation of secure authentication methods such as TOTP 2FA, OAuth with PKCE, and WebAuthn/Passkeys.
- Guidance on production hardening including rate limiting, CSRF protection, and secure cookie configurations.
- Use of official, well-known packages and adapters (e.g., Prisma, Drizzle, Redis).
- [SAFE]: No malicious patterns such as credential exfiltration, prompt injection, or unauthorized remote code execution were detected. All shell commands provided are standard installation and schema migration tasks for developers.
Audit Metadata