How does the skill detect N+1 query problems?

It analyzes JPA entity relationships, fetch types, and repository query patterns to identify loops that trigger multiple database hits, suggesting EntityGraphs or fetch joins as solutions.

Can it help with Spring Security configuration?

Yes, it reviews your SecurityFilterChain, method-level @PreAuthorize annotations, and CSRF settings to ensure the API is protected against common vulnerabilities.

Does this skill support Kotlin-based Spring projects?

No, this skill is optimized for Java. For Kotlin projects, it is recommended to use a specific kotlin-spring-reviewer.

Does it require specific project files to work?

The skill automatically activates when it detects spring-boot-starter dependencies in pom.xml or build.gradle, or the presence of a @SpringBootApplication annotation.

Spring Boot Code Reviewer

Name: Spring Boot Code Reviewer
Author: physics91

byphysics91

API Development

Reviews Spring Boot applications for optimal dependency injection, transaction management, REST API design, and security best practices.

About

The Spring Boot Reviewer is a specialized Claude Code skill designed to audit and improve Java-based Spring Boot applications. It automatically identifies critical architectural issues such as field injection, JPA N+1 query problems, and missing transaction boundaries. By analyzing security configurations, DTO validation, and controller layer separation, it ensures that backend services are robust, testable, and production-ready. This skill is ideal for developers seeking to enforce industry-standard best practices and maintain high code quality across microservices or monolithic applications.

Key Features

0 GitHub stars
Validates transaction management boundaries and correct @Transactional propagation
Detects JPA performance bottlenecks including the N+1 query problem and suggests fetch joins
Audits Spring Security configurations for unauthorized access risks and hardcoded credentials
Enforces clean architecture by moving business logic from controllers to service layers
Identifies and migrates field injection to constructor-based dependency injection

Use Cases

Performing a comprehensive architectural audit of a Spring Boot microservice before production
Securing REST APIs by ensuring proper method-level authorization and DTO validation patterns
Optimizing database performance by identifying inefficient JPA relationships and lazy loading issues

About

Key Features

0 GitHub stars
Validates transaction management boundaries and correct @Transactional propagation
Detects JPA performance bottlenecks including the N+1 query problem and suggests fetch joins
Audits Spring Security configurations for unauthorized access risks and hardcoded credentials
Enforces clean architecture by moving business logic from controllers to service layers
Identifies and migrates field injection to constructor-based dependency injection

Use Cases

Performing a comprehensive architectural audit of a Spring Boot microservice before production
Securing REST APIs by ensuring proper method-level authorization and DTO validation patterns
Optimizing database performance by identifying inefficient JPA relationships and lazy loading issues