better-auth-scaffold
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to complete the project setup, specifically
npx @better-auth/cli@latest generateto generate the authentication schema, andnpx drizzle-kitcommands for database migrations. These are standard operations for these development tools. - [EXTERNAL_DOWNLOADS]: The skill triggers the download of the
@better-auth/clianddrizzle-kitpackages vianpxfrom the npm registry. Additionally, the generated email module communicates with the Resend API to send transactional emails, which is an expected behavior for an authentication system. - [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill generates a
.env.examplefile and instructs the user to provide their own secrets via environment variables, following industry standard practices for secret management. - [PROMPT_INJECTION]: The skill's instructions focus on project scaffolding and do not contain patterns intended to override agent behavior or bypass safety filters.
Audit Metadata