create-auth
Build Better Auth Authentication
Authentication setup requires coordinated framework, database, provider, route, and interface changes. This skill plans and implements a Better Auth integration for your application.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "create-auth" from https://skillstore.io/skills/better-auth-create-auth-skill.md and its manifest at https://skillstore.io/api/skills/better-auth-create-auth-skill/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "create-auth". Add email authentication to my Next.js application using Prisma and PostgreSQL.
Expected outcome:
- A confirmed implementation plan covering routes, database changes, environment settings, and interface pages.
- Better Auth server and client integration aligned with the existing Next.js structure.
- Prisma schema generation, migration guidance, and a production security checklist.
Using "create-auth". Add Google OAuth and organization support to an existing SvelteKit application.
Expected outcome:
- A project assessment that preserves the current database and package manager.
- SvelteKit handlers, Google provider configuration, organization plugins, and matching client integration.
- Credential, callback, migration, testing, and deployment steps.
Using "create-auth". Plan a migration from another authentication library.
Expected outcome:
A staged migration plan covering current behavior, route replacement, session compatibility, user data, rollback points, and removal of the previous library.
Security Audit
Medium RiskContextual review confirmed five findings because the skill directs package installation and database migration commands. Other matches are documentation syntax, links, configuration examples, or standard environment access. No prompt injection or data exfiltration intent was found.
Confirmed security concerns (1)
Capability review items (5)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (50)
🌐 Network access (7)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/better-auth-create-auth-skill/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/better-auth-create-auth-skill?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/better-auth-create-auth-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/better-auth-create-auth-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/better-auth-create-auth-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
better-auth. (2026). create-auth security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/better-auth-create-auth-skill/audits/6BibTeX citation
@techreport{better-auth-better-auth-create-auth-skill-2026,
author = {better-auth},
title = {create-auth security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/better-auth-create-auth-skill/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "create-auth security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "better-auth"
date-released: "2026-07-12"
url: "https://skillstore.io/skills/better-auth-create-auth-skill/audits/6"
identifiers:
- type: other
value: "skillstore:better-auth-create-auth-skill:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: HighWhat You Can Build
Launch Authentication
Create sign-in, sign-up, session, route, database, and provider integration for a new web application.
Add Auth to an Existing App
Inspect the current architecture and integrate Better Auth without replacing unrelated application structure.
Migrate Authentication
Plan an incremental transition from another authentication library while preserving routes, sessions, and user flows.
Try These Prompts
Add Better Auth to this project with email and password sign-in. Inspect the framework and database, then ask for missing requirements.
Configure Better Auth with Google and GitHub OAuth. Include callback routes, required environment variables, sign-in pages, and provider setup steps.
Audit the current authentication implementation and plan a staged Better Auth migration. Preserve active sessions where feasible and identify compatibility risks.
Implement Better Auth with organizations, two-factor authentication, passkeys, email verification, rate limits, and production migrations. Review every security-sensitive configuration.
Best Practices
- Confirm the implementation plan before changing dependencies, files, or database schemas.
- Store secrets in environment variables and configure secure cookies, trusted origins, verification, and rate limits.
- Pin package versions, review generated migrations, and back up production databases before applying changes.
Avoid
- Do not disable CSRF protection or weaken cookie security to resolve configuration errors.
- Do not embed database URLs, authentication secrets, or OAuth credentials in source files.
- Do not run development schema push commands against production databases.
Frequently Asked Questions
Which frameworks are supported?
Which databases can I use?
Can it add social sign-in?
Does it create authentication pages?
Will it run database migrations?
Does it replace security review?
Developer Details
Author
better-authLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
d71c7417a35d5c2624161bd2fe8de8a41a362128
Maintenance freshness
7/18/2026
Usage
6 downloads · 151 views
File structure
📄 SKILL.md