auth
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard implementation patterns for the 'better-auth' authentication library. All sensitive configurations, such as OAuth credentials and application URLs, are correctly managed using environment variables (e.g.,
process.env.GITHUB_CLIENT_ID,process.env.PUBLIC_APP_URL) rather than hardcoding secrets. It correctly emphasizes server-side session validation in its 'Common Mistakes' and 'Best Practices' sections to prevent client-side authorization bypasses. The skill uses official and well-known dependencies from the 'better-auth' and '@tanstack' ecosystems, which are standard in modern web development. No suspicious obfuscation, remote code execution, or data exfiltration patterns were detected.
Audit Metadata