best-practices

Audit Better Auth integrations for security risks and OWASP-aligned remediation.

8|4|Updated Jan 15, 2026
One-click install
npx skills add https://github.com/jscraik/Agent-Skills --skill best-practices-jscraik
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: best-practices
Source: https://github.com/jscraik/Agent-Skills/tree/main/auth/best-practices
Command: npx skills add https://github.com/jscraik/Agent-Skills --skill best-practices-jscraik

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify security vulnerabilities and configuration weaknesses in existing Better Auth integrations, ensuring production-readiness without undertaking full implementation.

Core Features & Use Cases

  • Security Audits: Review Better Auth setups for secure defaults and identify risks in secrets management, session handling, and provider configurations.
  • Configuration Guidance: Provide actionable advice on improving security posture and aligning with OWASP standards.
  • Use Case: An existing application uses Better Auth. You need to audit its current configuration for potential security gaps before a major release.

Quick Start

Review my Better Auth config for security gaps.

Frequently Asked Questions about best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Better Auth integrations for security vulnerabilities?

Auditing Better Auth integrations involves reviewing authentication flows, session handling, and provider configurations against OWASP standards to identify security risks and provide actionable remediation advice for production-readiness.

What do I need to provide to audit my Better Auth configuration?

Auditing Better Auth configuration requires providing your framework, runtime, database adapter, and enabled auth features as input so the review can deliver specific, actionable remediation advice aligned with security best practices.

Can I use this audit for debugging auth flows in production?

Yes, auditing Better Auth configurations applies to debugging auth flows for production-readiness by identifying security vulnerabilities and configuration weaknesses in existing integrations without requiring full implementation.

What's the best way to review Better Auth setup for secure defaults?

Reviewing Better Auth setups for secure defaults requires analyzing authentication flows, session handling, and provider configurations to identify risks and provide remediation advice aligned with OWASP standards.

Why does my Better Auth integration need a security configuration audit?

A security configuration audit is needed to identify vulnerabilities and configuration weaknesses in existing Better Auth integrations, ensuring production-readiness and proper secrets management before deployment.