CtrlK
BlogDocsLog inGet started
Tessl Logo

better-auth

Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework. Features include email/password authentication with verification, OAuth providers (Google, GitHub, Discord, etc.), two-factor authentication (TOTP, SMS), passkeys/WebAuthn support, session management, role-based access control (RBAC), rate limiting, and database adapters. Use when adding authentication to applications, implementing OAuth flows, setting up 2FA/MFA, managing user sessions, configuring authorization rules, or building secure authentication systems for web applications.

70

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

72%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is highly actionable and well-structured with executable code and real one-level-deep references, but it is slightly redundant with the frontmatter description and lacks explicit validation/feedback checkpoints for migration and auth setup. It is strong overall with room to tighten and add verify steps.

Suggestions

Remove or trim the redundant intro sentence and the 'When to Use' list, since the frontmatter description already covers what the skill is and when to use it — this would tighten conciseness toward the top anchor.

Add an explicit validation/feedback loop around the database step, e.g. after 'npx @better-auth/cli generate' verify the schema, and after setup run a sanity check (e.g. hit the auth health endpoint) before proceeding to UI work.

Replace 'powerful plugin ecosystem' with a concrete statement of what the plugins enable, to avoid filler while keeping the same information value.

DimensionReasoningScore

Conciseness

The body is mostly efficient (code, tables, checklist), but the opening line 'Better Auth is comprehensive, framework-agnostic authentication/authorization framework for TypeScript with built-in email/password, social OAuth, and powerful plugin ecosystem' and the 'When to Use' list restate the frontmatter description, and 'powerful plugin ecosystem' is mild filler — tightening opportunities keep it off the top anchor.

2 / 3

Actionability

It provides copy-paste-ready, executable guidance throughout — 'npm install better-auth', a complete auth.ts server config, 'npx @better-auth/cli generate', the Next.js handler, the auth-client setup, and signUp/signIn/session code samples — matching the 'fully executable code/commands' anchor.

3 / 3

Workflow Clarity

A clear sequence exists (Quick Start steps plus an Implementation Checklist), but schema migration and auth setup are fragile operations with no explicit validate→fix→retry checkpoint; 'Test complete auth flow' is implicit verification rather than a feedback loop, so the validation-gaps cap applies.

2 / 3

Progressive Disclosure

The body is an overview that points to four real one-level-deep reference files via the Feature Selection Matrix and the Reference Documentation section (e.g. '[email-password-auth.md](./references/email-password-auth.md)'), each verified to exist, giving clear navigation without nested references.

3 / 3

Total

10

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is third-person, concrete, and complete: it lists numerous specific capabilities and pairs them with an explicit multi-trigger 'Use when' clause scoped to the Better Auth framework. It hits the top anchor on every dimension with no fluff or over-claims.

DimensionReasoningScore

Specificity

Opens with the concrete verb 'Implement authentication and authorization' and enumerates specific capabilities — 'email/password authentication with verification, OAuth providers (Google, GitHub, Discord, etc.), two-factor authentication (TOTP, SMS), passkeys/WebAuthn support, ... RBAC, rate limiting, and database adapters' — matching the 'lists multiple specific concrete actions' anchor.

3 / 3

Completeness

It states both what the skill does (the capability list) and when to use it via an explicit 'Use when adding authentication ... or building secure authentication systems for web applications' clause, satisfying the 'clearly answers both what AND when' anchor.

3 / 3

Trigger Term Quality

The 'Use when' clause surfaces natural terms a user would say — 'adding authentication', 'implementing OAuth flows', 'setting up 2FA/MFA', 'managing user sessions', 'configuring authorization rules' — giving good coverage of common phrasings.

3 / 3

Distinctiveness Conflict Risk

It is anchored to a named, specific framework ('Better Auth - a framework-agnostic TypeScript authentication framework') with auth-specific triggers, giving it a clear niche unlikely to fire for unrelated skills.

3 / 3

Total

12

/

12

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
mrgoonie/claudekit-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.