Community生产力与协作github.com

better-auth/better-auth-security-best-practices

better-auth-security-best-practices — 一个可安装的AI代理技能,提供Better Auth的安全最佳实践。

better-auth-security-best-practices 是什么?

这个技能旨在帮助开发者在使用Better Auth时遵循安全最佳实践。它提供了一个可安装的知识库,供AI代理(如Claude Code、Cursor、Codex等)在代码生成、审查或配置过程中参考。该技能涵盖了常见的安全漏洞预防措施、认证流程的正确实现、令牌管理、会话保护以及敏感数据的处理。通过直接集成到AI工作流中,开发者可以确保其认证系统更安全、稳健,减少因配置错误导致的漏洞风险。

兼容平台~Claude Code~Codex CLI~Cursor
npx skills add https://github.com/better-auth/skills/tree/main/skills/better-auth-security-best-practices

Installed? Explore more 生产力与协作 skills: steipete/gemini, steipete/gh-issues, steipete/skill-creator · View all 6 →

在你喜欢的 AI 中提问

打开一个已预加载此 Agent Skill 的新对话。

文档

better-auth-security-best-practices 是做什么的?

better-auth-security-best-practices — 一个可安装的AI代理技能,提供Better Auth的安全最佳实践。

Individual skills in this repo

This repo contains 5 individual skills — each has its own dedicated page.

better-auth/better-auth-best-practices

Configure Better Auth server and client, set up database adapters, manage sessions, add plugins, and handle environment variables. Use when users mention Better Auth, betterauth, auth.ts, or need to set up TypeScript authentication with email/password, OAuth, or plugin configuration.

better-auth/create-auth-skill

Scaffold and implement authentication in TypeScript/JavaScript apps using Better Auth. Detect frameworks, configure database adapters, set up route handlers, add OAuth providers, and create auth UI pages. Use when users want to add login, sign-up, or authentication to a new or existing project with Better Auth.

better-auth/email-and-password-best-practices

Configure email verification, implement password reset flows, set password policies, and customise hashing algorithms for Better Auth email/password authentication. Use when users need to set up login, sign-in, sign-up, credential authentication, or password security with Better Auth.

better-auth/organization-best-practices

Configure multi-tenant organizations, manage members and invitations, define custom roles and permissions, set up teams, and implement RBAC using Better Auth's organization plugin. Use when users need org setup, team management, member roles, access control, or the Better Auth organization plugin.

better-auth/two-factor-authentication-best-practices

Configure TOTP authenticator apps, send OTP codes via email/SMS, manage backup codes, handle trusted devices, and implement 2FA sign-in flows using Better Auth's twoFactor plugin. Use when users need MFA, multi-factor authentication, authenticator setup, or login security with Better Auth.

相关技能