better-auth

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation, reference guides, database schemas, and helper utilities for installing, migrating, and configuring the better-auth authentication framework across various environments (Next.js, Nuxt, SvelteKit, Remix, and Cloudflare Workers).
  • [SAFE]: The included utility scripts scripts/generate-secret.sh and scripts/setup-d1-drizzle.sh generate encryption values properly via openssl rand -base64 32 and securely pipe secrets directly into wrangler secret put BETTER_AUTH_SECRET without printing secrets to logs, storing credentials in plaintext files, or exposing credentials over stdout.
  • [SAFE]: Configuration validators (scripts/validate-config.ts) check for proper variable length and warn against weak placeholder values or outdated methods without executing any remote untrusted payloads or performing unintended runtime side-effects.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 11:59 PM
Security Audit — agent-trust-hub — better-auth