CtrlK
BlogDocsLog inGet started
Tessl Logo

better-auth-best-practices

Better Auth server/client setup: `auth.ts`, generated schema, DB adapters, sessions, cookies, env vars, and plugins. Use when mentioning Better Auth, betterauth, auth handlers, OAuth, email/password, or session configuration.

77

Quality

96%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

92%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a dense, actionable, well-sequenced Better Auth reference with concrete commands, config keys, and an explicit setup verification step. Its main weakness is structural: it is a monolithic single-file reference with no bundled reference files, so substantial reference material sits inline rather than behind one-level-deep links.

Suggestions

Move detailed reference material (Core Config Options table, Session Management, Hooks, and the Plugins catalog) into bundled files under references/ (e.g. references/options.md, references/plugins.md) and keep SKILL.md as a lean overview with clearly signaled links, raising progressive_disclosure toward the score-3 split-files pattern.

Add a complete, copy-paste-ready auth.ts example showing betterAuth({ database, baseURL/secret, emailAndPassword, plugins }) so the central artifact is fully assembled, not just described as 'Create auth.ts with database + config'.

Turn the setup verification step into an explicit feedback loop, e.g. 'If GET /api/auth/ok does not return { status: "ok" }, check BETTER_AUTH_SECRET/BETTER_AUTH_URL and re-run bun x @better-auth/cli@latest migrate', to make the validation checkpoint a true error-recovery loop.

DimensionReasoningScore

Conciseness

Dense, bullet/table-driven reference with no conceptual padding (it never explains what auth or a database is); every section adds Better-Auth-specific knowledge Claude would not reliably know, fitting the lean score-3 anchor.

3 / 3

Actionability

Concrete commands (bun add, migrate), specific config keys with values ({ enabled: true }, basePath defaults), an executable plugin import snippet, type expressions, and a verify endpoint (GET /api/auth/ok → { status: "ok" }) — concrete and executable rather than abstract.

3 / 3

Workflow Clarity

Setup Workflow is a numbered 1-6 sequence with an explicit validation checkpoint (step 6 verify), and the Common Gotchas section supplies recovery context, matching the explicit-validation score-3 anchor.

3 / 3

Progressive Disclosure

Well-organized with clear section headers, but ~190 lines of inline reference (full options table, session/cookie reference, hooks, plugin catalog) that could live in separate files; there are no bundled reference files and the under-50-line exception does not apply, so it fits the score-2 "content that should be separate is inline" anchor rather than the split-files score-3 anchor.

2 / 3

Total

11

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific, lists concrete capabilities, and pairs a clear "what" with an explicit "Use when" trigger clause covering natural user terms. It is third-person, free of fluff, and tightly scoped to Better Auth, so it is unlikely to conflict with other skills.

DimensionReasoningScore

Specificity

Lists multiple specific concrete capabilities — "server/client setup", "generated schema", "DB adapters", "sessions", "cookies", "env vars", "and plugins" — rather than vague language; matches the score-3 anchor of naming several specific actions/items.

3 / 3

Completeness

Clearly answers both what ("Better Auth server/client setup: ... env vars, and plugins") and when via an explicit "Use when" trigger clause, satisfying the score-3 anchor; the "Use when" clause prevents the completeness cap at 2.

3 / 3

Trigger Term Quality

Explicit "Use when mentioning Better Auth, betterauth, auth handlers, OAuth, email/password, or session configuration" gives good coverage of natural terms a user would actually say, including casing variants (Better Auth / betterauth).

3 / 3

Distinctiveness Conflict Risk

Scoped to a single named framework (Better Auth / betterauth) with distinct triggers; unlikely to fire for generic auth skills, fitting the clear-niche score-3 anchor.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
EpicenterHQ/epicenter
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.