The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes instructions to run npx auth@latest migrate. This is a standard operational command for the Better Auth framework to synchronize database schemas with the authentication configuration.
[EXTERNAL_DOWNLOADS]: The documentation references the installation and use of well-known, legitimate Node.js packages such as better-auth and @node-rs/argon2 for standard authentication and secure hashing implementations.
[INDIRECT_PROMPT_INJECTION]: The skill describes patterns for processing external data such as user email addresses and redirection URLs during authentication and password reset sequences.
Ingestion points: Handled via the email field in requestPasswordReset and the callbackURL parameter in sign-up/sign-in methods.
Boundary markers: Uses structured TypeScript objects and explicit parameters within configuration hooks to isolate data.
Capability inventory: Sending emails via a project-specific sendEmail function and executing database migrations through the npx auth CLI.
Sanitization: Incorporates best practices such as requiring absolute callback URLs to mitigate Host Header attacks and enforcing short-lived, single-use reset tokens.

email-and-password-best-practices