spring-boot-jpa

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard technical guidance for Java/Spring developers, focusing on ORM behavior differences between MySQL and PostgreSQL.
  • [SAFE]: Database connection string examples use localhost and include security best practices such as enabling SSL (useSSL=true, sslmode=require) and disabling insecure key retrieval.
  • [SAFE]: The skill correctly identifies and warns against common security and stability pitfalls, such as using hibernate.ddl-auto=update in production environments and using outdated database drivers with known vulnerabilities (CVEs).
  • [SAFE]: Dependency management instructions point to official, well-known artifacts (com.mysql:mysql-connector-j and org.postgresql:postgresql) and discourage the use of legacy or third-party libraries for features now built into Hibernate.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 05:22 AM
Security Audit — agent-trust-hub — spring-boot-jpa