better-auth

Skill for integrating Better Auth - comprehensive TypeScript authentication framework for Cloudflare D1, Next.js, Nuxt, and 15+ frameworks. Use when adding auth, encountering D1 adapter errors, or implementing OAuth/2FA/RBAC features.

Quality

76%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/better-auth/skills/better-auth/SKILL.md

Quality

Content

68%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, well-structured skill body with executable code and a thorough one-level-deep reference tree. Its main weaknesses are redundant reference cataloging across multiple sections and a deploy/migration workflow that omits an inline validation checkpoint for batch operations.

Suggestions

Collapse the 'When to Load References', 'Plugin/Database/Integration Guides', and 'Using Bundled Resources' sections into a single reference catalog to remove the triplicated sso.md/test-utils.md/electron.md entries and tighten conciseness.

Add an inline validation checkpoint to the deploy workflow (e.g., run scripts/test-auth-health.sh against /api/auth/health on local D1 before `wrangler deploy`) to satisfy the batch-operation feedback-loop requirement.

Trim or consolidate the 'Configuration Reference' section, which duplicates the Quick Reference config table and the configuration-guide.md pointer already stated elsewhere.

Dimension	Reasoning	Score
Conciseness	Mostly high-signal content (exact commands, version-specific breaking changes, real imports) with little concept-explanation fluff, but the ~790-line body carries clear redundancy: the 'When to Load References' section, the Plugin/Database/Integration Guides subsections, and 'Using Bundled Resources' re-list the same files, with sso.md/test-utils.md/electron.md triggers appearing up to three times.	3 / 5
Actionability	Fully executable, copy-paste-ready TypeScript and bash throughout (installation, D1 creation, schema, auth init, worker, deploy, and use-case patterns for email/password, social, and protected routes), covering the common cases with real imports and commands.	5 / 5
Workflow Clarity	The Quick Start gives a clear numbered deploy sequence and the checklist adds post-deploy testing, but the batch/destructive migration workflow (drizzle-kit generate → apply migrations → deploy) lacks an inline validation checkpoint, and the bundled test-auth-health.sh is not wired into the flow, so the batch-operation cap applies.	3 / 5
Progressive Disclosure	A clear overview pointing to 32 one-level-deep reference files organized into frameworks/, databases/, plugins/, integrations/, and nextjs/ subdirectories, all verified to exist and well-signaled with load triggers; the duplicated reference catalogs across three sections are a minor organization gap that keeps it below the top anchor.	4 / 5
	Total	15 / 20 Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description that names the framework, target platforms, and concrete trigger situations in third person, explicitly covering both what the skill does and when to use it. The main weakness is broad generic auth triggers that create minor overlap risk with competing auth skills.

Dimension	Reasoning	Score
Specificity	Names the domain ('comprehensive TypeScript authentication framework for Cloudflare D1, Next.js, Nuxt') and several concrete actions ('adding auth, encountering D1 adapter errors, or implementing OAuth/2FA/RBAC features'), with only minor coverage gaps versus the comprehensive anchor.	4 / 5
Completeness	Explicitly answers both 'what' (integrating Better Auth, a TypeScript auth framework for named stacks) and 'when' ('Use when adding auth, encountering D1 adapter errors, or implementing OAuth/2FA/RBAC features') with concrete trigger phrases, matching the top anchor.	5 / 5
Trigger Term Quality	Natural keywords users would say are present ('auth', 'OAuth', '2FA', 'RBAC', 'Cloudflare D1', 'Next.js', 'Nuxt', 'D1 adapter errors'), but common synonyms like 'login', 'sign in', 'session', or 'passkey' are absent, leaving a few natural terms missing.	4 / 5
Distinctiveness Conflict Risk	The Better Auth + Cloudflare D1 niche is clearly distinct, but generic triggers like 'adding auth' and 'implementing OAuth/2FA/RBAC' could overlap with other auth skills (Clerk, Auth.js), giving minor overlap risk.	4 / 5
	Total	17 / 20 Passed

Validation

81%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 13 / 16 Passed

Validation for skill structure

Criteria	Description	Result
skill_md_line_count	SKILL.md is long (804 lines); consider splitting into references/ and linking	Warning
metadata_field	'metadata' should map string keys to string values	Warning
referenced_paths_exist	Referenced path issues: 21 deeper-than-1-level	Warning

	Total	13 / 16 Passed

Repository: secondsky/claude-skills
Path: plugins/better-auth/skills/better-auth/SKILL.md
Commit: a0994f7

Reviewed: 2 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.