h2
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and configuration guide for the H2 in-memory database, which is a standard tool for Java development and testing.
- [SAFE]: Security-sensitive configurations, such as whitelisting the H2 console path (
/h2-console/**) and disabling CSRF for that path, are documented with appropriate context for development. The instructions explicitly advise against using these settings (likecreate-dropDDL) in production environments. - [SAFE]: The skill includes example configurations for transitioning to external databases like PostgreSQL, which use generic placeholder credentials (e.g.,
password=secret) for illustrative purposes. - [SAFE]: Command execution instructions (using
mvn) are limited to standard build and test operations within the local development lifecycle.
Audit Metadata