auth-bootstrapper
Automates BetterAuth integration for Apso backends, enabling quick setup and management of authentication with minimal manual steps.
Install this skill
Security score
The auth-bootstrapper skill was audited on Feb 9, 2026 and we found 29 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 356 | ```bash |
Curl to non-GitHub URL
| 228 | curl http://localhost:3001/health |
Curl to non-GitHub URL
| 234 | curl -X POST http://localhost:3001/Users \ |
Curl to non-GitHub URL
| 255 | curl http://localhost:3001/Users |
Curl to non-GitHub URL
| 258 | curl http://localhost:3001/Users/{id} |
Curl to non-GitHub URL
| 261 | curl -X PATCH http://localhost:3001/Users/{id} \ |
Curl to non-GitHub URL
| 265 | curl -X DELETE http://localhost:3001/Users/{id} |
Access to .env file
| 183 | I create `.env` files: |
Access to .env file
| 186 | # .env.development |
Access to .env file
| 335 | ### `.env.development` |
Access to .env file
| 346 | ### `.env.test` |
Access to .env file
| 355 | ### `.env.production` (template) |
Access to .env file
| 467 | ├── .env.development |
Access to .env file
| 468 | ├── .env.test |
Access to .env file
| 566 | baseUrl: process.env.NEXT_PUBLIC_BACKEND_URL || 'http://localhost:3001', |
External URL reference
| 195 | BETTER_AUTH_URL=http://localhost:3001 |
External URL reference
| 198 | ALLOWED_ORIGINS=http://localhost:3000,http://localhost:3003 |
External URL reference
| 228 | curl http://localhost:3001/health |
External URL reference
| 234 | curl -X POST http://localhost:3001/Users \ |
External URL reference
| 255 | curl http://localhost:3001/Users |
External URL reference
| 258 | curl http://localhost:3001/Users/{id} |
External URL reference
| 261 | curl -X PATCH http://localhost:3001/Users/{id} \ |
External URL reference
| 265 | curl -X DELETE http://localhost:3001/Users/{id} |
External URL reference
| 341 | BETTER_AUTH_URL=http://localhost:3001 |
External URL reference
| 342 | ALLOWED_ORIGINS=http://localhost:3000,http://localhost:3003 |
External URL reference
| 361 | BETTER_AUTH_URL=https://api.yourdomain.com |
External URL reference
| 362 | ALLOWED_ORIGINS=https://yourdomain.com |
External URL reference
| 407 | After setup, you get interactive docs at `http://localhost:3001/api/docs` |
External URL reference
| 566 | baseUrl: process.env.NEXT_PUBLIC_BACKEND_URL || 'http://localhost:3001', |