Skip to main content

better-auth-skill

Guides users in configuring Better Auth with JWT for secure authentication, covering user signup, login, and session management.

Install this skill

or
73/100

Security score

The better-auth-skill skill was audited on Feb 28, 2026 and we found 11 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 475

Template literal with variable interpolation in command context

SourceSKILL.md
475'Authorization': `Bearer ${localStorage.getItem('access_token')}`
medium line 623

Template literal with variable interpolation in command context

SourceSKILL.md
623...(token ? { 'Authorization': `Bearer ${token}` } : {}),
medium line 627

Template literal with variable interpolation in command context

SourceSKILL.md
627const response = await fetch(`${API_BASE}${endpoint}`, {
medium line 657

Template literal with variable interpolation in command context

SourceSKILL.md
657const res = await fetch(`${API_BASE}/api/v1/auth/refresh`, {
low line 473

Fetch to external URL

SourceSKILL.md
473const res = await fetch('/api/v1/auth/me', {
low line 493

Fetch to external URL

SourceSKILL.md
493const res = await fetch('/api/v1/auth/login/json', {
low line 511

Fetch to external URL

SourceSKILL.md
511const res = await fetch('/api/v1/auth/register', {
low line 541

Fetch to external URL

SourceSKILL.md
541const res = await fetch('/api/v1/auth/refresh', {
low line 44

Access to .env file

SourceSKILL.md
44env_file = ".env"
low line 608

Access to .env file

SourceSKILL.md
608const API_BASE = process.env.NEXT_PUBLIC_API_URL || 'http://localhost:8000'
low line 608

External URL reference

SourceSKILL.md
608const API_BASE = process.env.NEXT_PUBLIC_API_URL || 'http://localhost:8000'
Scanned on Feb 28, 2026
View Security Dashboard