Better Auth

• Analyzed: May 14, 2026, 3:12 AM
• Findings: 1
• Version: 0.1.0
• Hash: 9f58c175e5c6e3fec601b3267f9fe270698b1d29c724a0e0cade1f1c392a9111
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides comprehensive documentation, code examples, and a setup script for integrating the 'better-auth' library with Cloudflare Workers and D1. The `SKILL.md` and `README.md` files contain extensive technical details and instructions, but these are consistently focused on the stated purpose of authentication setup and troubleshooting, without any evidence of prompt injection attempts to manipulate the agent for malicious ends. The `scripts/setup-d1-drizzle.sh` script uses standard development commands like `npm install`, `wrangler d1 create`, `npx drizzle-kit generate`, and `wrangler secret put` (including `openssl rand -base64` for secure secret generation), all of which are legitimate for configuring a Cloudflare Worker project. No files show signs of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The `allowed-tools` in `SKILL.md` include `Bash`, which is a powerful capability, but its usage in the provided script and instructions is aligned with the benign purpose of system setup.