Can I use this for secrets management?

Yes, the skill includes guidance on using environment variables and HashiCorp Vault to keep sensitive credentials out of your source code.

How does it handle SQL injection prevention?

It provides code examples for using Panache Active Record and parameterized native queries to ensure database interactions are safe from injection attacks.

Does it include security headers for web protection?

Absolutely. It contains boilerplate for ContainerResponseFilters that implement CSP, HSTS, X-Frame-Options, and other essential security headers.

Does this skill support OIDC configuration?

Yes, it provides standard configuration patterns for connecting Quarkus to OIDC servers, including client ID and secret management.

Quarkus Security Review Claude Code Skill

The quarkus-security skill provides specialized guidance for securing Java applications built on the Quarkus framework. It covers essential security domains including JWT/OIDC authentication, Role-Based Access Control (RBAC), robust data validation, and integrated secrets management. By providing battle-tested code patterns for preventing SQL injection, managing security headers, and implementing rate limiting, this skill enables developers to build cloud-native applications that are secure by design and compliant with modern enterprise safety standards.

主な機能

01SQL injection prevention via Panache and parameterized queries

02214,597 GitHub stars

03Declarative and programmatic Role-Based Access Control (RBAC)

04Input validation using Bean Validation and custom constraints

05Security header configuration and CORS management

06JWT and OIDC authentication implementation patterns

ユースケース

01Securing RESTful APIs with identity providers like Keycloak or Auth0

02Hardening cloud-native Java microservices against OWASP vulnerabilities

03Implementing fine-grained authorization for sensitive business logic

Tieline — product intent grounded in code

Quarkus Security Review

主な機能

ユースケース

1Password CLI

GateGuard Pre-Action Gate

Quarkus Verification

主な機能

ユースケース