better-auth
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes an interactive setup script
scripts/better_auth_init.pythat generates cryptographically secure secrets using the Pythonsecretsmodule and configures.envfiles. This is a standard and recommended practice for secret management in web applications. - [SAFE]: The script provides a safe migration path for configuration by backing up existing
.envfiles to.env.backupbefore making changes. - [SAFE]: The documentation and references promote the use of secure authentication mechanisms, such as two-factor authentication (TOTP), passkeys (WebAuthn), and secure session management.
- [SAFE]: All external dependencies mentioned in the documentation (e.g., better-auth, drizzle-orm, prisma) are well-known, reputable packages in the TypeScript ecosystem.
Audit Metadata