kernel-dev-auth
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional documentation and code templates intended to guide developers in implementing authentication using the 'Better Auth' library.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The provided code examples correctly demonstrate using environment variables (e.g.,
BETTER_AUTH_SECRET,NEXT_PUBLIC_APP_URL) for configuration, which is a standard security best practice for protecting secrets and environment-specific settings. - [UNVERIFIABLE_DEPENDENCIES]: The skill references established packages from the 'Better Auth' ecosystem (
better-auth,@better-auth/expo), which are widely recognized in the JavaScript development community. - [INDIRECT_PROMPT_INJECTION]: While the skill defines flows for handling untrusted user data (such as login credentials), it does not implement any interpolation or processing of this data that would allow for prompt injection or instruction override.
Audit Metadata