h2

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation and configuration guide for the H2 in-memory database, which is a standard tool for Java development and testing.
  • [SAFE]: Security-sensitive configurations, such as whitelisting the H2 console path (/h2-console/**) and disabling CSRF for that path, are documented with appropriate context for development. The instructions explicitly advise against using these settings (like create-drop DDL) in production environments.
  • [SAFE]: The skill includes example configurations for transitioning to external databases like PostgreSQL, which use generic placeholder credentials (e.g., password=secret) for illustrative purposes.
  • [SAFE]: Command execution instructions (using mvn) are limited to standard build and test operations within the local development lifecycle.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 06:04 PM
Security Audit — agent-trust-hub — h2