better-auth-security-best-practices

Security-focused hardening rules for authentication endpoints, secure cookie attributes, brute-force mitigation, and token revocation.

Publisher: Better Auth•Audited: 2026-11-02•Agents: Claude Code, Cursor, Codex, Windsurf

Install Command

npx skills add better-auth/skills --skill better-auth-security-best-practices

Source Repository•View on skills.sh

When to use this skill

•Hardening authentication routes and session cookies against CSRF and XSS
•Implementing rate limiting on login, registration, and password reset endpoints
•Configuring token revocation upon logout and password changes

Package Files

SKILL.mdSource File

references/csrf.mdSource File

references/cookies.mdSource File

Related security Skills

security-audit

Automated security review checking for exposed secret keys, insecure SQL queries, cross-site scripting (XSS), missing authorization guards, and permissive CORS.

code-review

Automated code review pipeline catching SQL injections, insecure session handling, uncaught promises, and missing authorization checks.

Production grade starter repo

Pre built starter repo with auth, databases, backend, and AI integrations already configured based on your tech stack of choice (worth $200+ and saves you 30+ hours of configuration).

6 Core Languages Supported18+ Frontend • 45+ Backend

TypeScript

React Native

Rust

Python

Java

Custom PRD & business logicTasks streamed via MCPAgent skills pre-installed

Build with your agent