Skip to main content

email-and-password-best-practices

Provides secure email and password authentication practices using Better Auth, enhancing user verification and security measures.

Install this skill

or
82/100

Security score

The email-and-password-best-practices skill was audited on May 24, 2026 and we found 6 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 20

Template literal with variable interpolation in command context

SourceSKILL.md
20text: `Click the link to verify your email: ${url}`,
medium line 78

Template literal with variable interpolation in command context

SourceSKILL.md
78text: `Click the link to reset your password: ${url}`,
medium line 84

Template literal with variable interpolation in command context

SourceSKILL.md
84console.log(`Password for user ${user.email} has been reset.`);
low line 56

External URL reference

SourceSKILL.md
56callbackURL: "https://example.com/callback", // absolute URL with origin
low line 172

External URL reference

SourceSKILL.md
172redirectTo: "https://example.com/reset-password",
low line 182

External URL reference

SourceSKILL.md
182redirectTo: "https://example.com/reset-password",
Scanned on May 24, 2026
View Security Dashboard
Installation guide →