Skip to content
mcp/skillhub

Agent Skill

Better Auth Security Best Practices skill

better-auth-security-best-practicesbetter-auth/skillssecurity/SKILL.md

Configure rate limiting, manage auth secrets, set up CSRF protection, define trusted origins, secure sessions and cookies, encrypt OAuth tokens, track IP addresses, and implement audit logging for Better Auth. Use when users need to secure their auth setup, prevent brute force attacks, or harden a Better Auth deployment.

224

always on

70 tokname + description

once used

2,551 tokSKILL.md body

bundled files

0

repo stars

224GitHub

Install the Better Auth Security Best Practices skill

Skills CLI (Claude Code, Codex, Cursor and others)

npx skills add https://github.com/better-auth/skills --skill better-auth-security-best-practices

Claude Code, by hand (all projects)

git clone --depth 1 https://github.com/better-auth/skills.git /tmp/skills
mkdir -p ~/.claude/skills
cp -R /tmp/skills/security ~/.claude/skills/better-auth-security-best-practices

For one project only, copy the folder into .claude/skills/ in that project instead. The agent picks it up when a task matches its description.

What it costs your context

Agent Skills load in three steps. Tokens counted with the o200k tokenizer; your model's count will differ a little.

WhenWhat loadsCost
Every sessionName and description70 tok
When the agent uses itThe SKILL.md instructions2,551 tok
Only if openedNo bundled files—

Until it is used, better-auth-security-best-practices costs about 19× less than the median MCP server we measured (1,362 tokens on every turn). Installing all 6 skills from better-auth/skills would load 381 tokens of descriptions. Skills vs MCP study

Checks

  • The name doesn't match its folder name, as the specification requires.

Checked 2026-10-22 · method

What's inside

The headings of its SKILL.md. Read the full file on GitHub.

  • Secret Management
  • Configuring the Secret
  • Secret Requirements
  • Rate Limiting
  • Default Configuration
  • Storage Options
  • Custom Storage
  • Per-Endpoint Rules
  • CSRF Protection
  • Configuration
  • Trusted Origins
  • Configuring Trusted Origins
  • Wildcard Patterns
  • Dynamic Trusted Origins
  • Session Security
  • Session Expiration
  • Session Caching Strategies
  • Cookie Security
  • Custom Cookie Configuration
  • Cross-Subdomain Cookies
  • OAuth / Social Provider Security
  • State Parameter Storage
  • Encrypting OAuth Tokens
  • IP-Based Security

More skills from better-auth/skills

All skills in this repo
  1. better-auth-best-practicesbetter-auth/skills

    Configure Better Auth server and client, set up database adapters, manage sessions, add plugins, and handle environment variables. Use when users mention Better Auth, betterauth, auth.ts, or need to set up TypeScript authentication with email/password, OAuth, or plugin configuration.

    125k61 tok idle · 1,997 in use
  2. create-authbetter-auth/skills

    Scaffold and implement authentication in TypeScript/JavaScript apps using Better Auth. Detect frameworks, configure database adapters, set up route handlers, add OAuth providers, and create auth UI pages. Use when users want to add login, sign-up, or authentication to a new or existing project with Better Auth.

    22463 tok idle · 3,595 in use
  3. email-and-password-best-practicesbetter-auth/skills

    Configure email verification, implement password reset flows, set password policies, and customise hashing algorithms for Better Auth email/password authentication. Use when users need to set up login, sign-in, sign-up, credential authentication, or password security with Better Auth.

    22457 tok idle · 1,307 in use
  4. organization-best-practicesbetter-auth/skills

    Configure multi-tenant organizations, manage members and invitations, define custom roles and permissions, set up teams, and implement RBAC using Better Auth's organization plugin. Use when users need org setup, team management, member roles, access control, or the Better Auth organization plugin.

    22461 tok idle · 2,428 in use
  5. two-factor-authentication-best-practicesbetter-auth/skills

    Configure TOTP authenticator apps, send OTP codes via email/SMS, manage backup codes, handle trusted devices, and implement 2FA sign-in flows using Better Auth's twoFactor plugin. Use when users need MFA, multi-factor authentication, authenticator setup, or login security with Better Auth.

    22469 tok idle · 1,859 in use