Implements and reviews enterprise-grade security protocols for Java Spring Boot applications and services.
The Spring Boot Security skill equips Claude with specialized knowledge to audit, implement, and optimize security across the Spring ecosystem. It provides comprehensive guidance on authentication (JWT/OAuth2), role-based access control, input validation to prevent SQL injection and XSS, and secret management. Whether you're setting up a new service or hardening an existing one, this skill ensures your code follows OWASP best practices, handles PII correctly, and maintains secure dependency chains via industry-standard patterns.
主な機能
01Pre-release security checklist for secrets, logging, and dependency scanning
02Method-level authorization using @PreAuthorize and custom security expressions
03Authentication patterns for stateless JWT and secure session management
04Configuration templates for CSRF protection and security headers
05Input validation and sanitization to prevent SQL injection and XSS
060 GitHub stars
ユースケース
01Conducting automated security audits for Spring Boot service configurations
02Hardening REST APIs against common vulnerabilities like CSRF, XSS, and SQLi
03Implementing fine-grained access control and role-based authorization guards
