two-factor-authentication-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as a configuration guide and implementation template for multi-factor authentication. The provided code snippets demonstrate industry-standard security practices, including the use of temporary 2FA cookies, trusted device expiration, and recovery code management.
- [COMMAND_EXECUTION]: The setup instructions include running
npx @better-auth/cli migrate. This is a standard administrative command for the Better Auth framework used to update database schemas to support 2FA columns (e.g.,twoFactorSecret). - [EXTERNAL_DOWNLOADS]: The skill references standard Node.js ecosystem packages including
better-auth,@better-auth/cli, andreact-qr-code. These are legitimate, well-known libraries for authentication and user interface development.
Audit Metadata