email-and-password-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to run the official Better Auth CLI for database migrations using
npx @better-auth/cli@latest migrateand references the@node-rs/argon2package for custom password hashing. - [SAFE]: The documentation explicitly promotes security-hardened configurations, such as implementing absolute callback URLs to prevent redirection issues, enforcing minimum password lengths, and enabling session revocation upon password reset to mitigate account takeover risks.
Audit Metadata