better-auth-scaffold

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to complete the project setup, specifically npx @better-auth/cli@latest generate to generate the authentication schema, and npx drizzle-kit commands for database migrations. These are standard operations for these development tools.
  • [EXTERNAL_DOWNLOADS]: The skill triggers the download of the @better-auth/cli and drizzle-kit packages via npx from the npm registry. Additionally, the generated email module communicates with the Resend API to send transactional emails, which is an expected behavior for an authentication system.
  • [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill generates a .env.example file and instructs the user to provide their own secrets via environment variables, following industry standard practices for secret management.
  • [PROMPT_INJECTION]: The skill's instructions focus on project scaffolding and do not contain patterns intended to override agent behavior or bypass safety filters.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 09:03 PM
Security Audit — agent-trust-hub — better-auth-scaffold