How does it help with Pull Requests?

It generates a standardized 'Verification Report' that summarizes build status, test coverage, and security findings, providing a clear checklist for reviewers.

Does this skill handle security scanning?

Yes, it includes dedicated phases for OWASP dependency checks to find known CVEs and git-secrets scanning to prevent accidental credential leaks.

What build tools does the springboot-verification skill support?

It supports both Maven and Gradle, providing specific commands for building, testing, and performing static analysis for both ecosystems.

Which static analysis tools are included in the workflow?

The skill integrates industry-standard tools including SpotBugs, PMD, and Checkstyle to catch potential bugs and maintain coding standards.

Spring Boot Verification Loop

Name: Spring Boot Verification Loop
Author: Fabio29T

byFabio29T

0•

Security & Testing

Automates a comprehensive verification cycle for Spring Boot applications including builds, tests, static analysis, and security audits.

This skill provides a structured verification workflow for Spring Boot developers, ensuring code quality and security before Pull Requests or deployments. It guides Claude through a multi-phase process: executing Maven or Gradle builds, performing static analysis with tools like SpotBugs and Checkstyle, running unit tests with coverage reporting via JaCoCo, and conducting security scans for CVEs and exposed secrets. By implementing this loop, developers can maintain high standards, catch bugs early, and generate standardized verification reports for better team collaboration.

Key Features

01Comprehensive support for both Maven and Gradle build systems

02Standardized verification report generation for PR documentation

030 GitHub stars

04Multi-phase verification loop including Build, Analysis, Test, Security, and Review

05Integrated static analysis using Checkstyle, PMD, and SpotBugs

06Automated security scanning for dependency CVEs and git secrets

Use Cases

01Automated verification and reporting before submitting a Pull Request

02Pre-deployment health checks to ensure production readiness

03Periodic code quality and security audits during intensive development sessions

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fabio29t/everything-claude springboot-verification

For use in Claude.ai and ChatGPT

Key Features

01Comprehensive support for both Maven and Gradle build systems

02Standardized verification report generation for PR documentation

030 GitHub stars

04Multi-phase verification loop including Build, Analysis, Test, Security, and Review

05Integrated static analysis using Checkstyle, PMD, and SpotBugs

06Automated security scanning for dependency CVEs and git secrets

Use Cases

01Automated verification and reporting before submitting a Pull Request

02Pre-deployment health checks to ensure production readiness

03Periodic code quality and security audits during intensive development sessions

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fabio29t/everything-claude springboot-verification

For use in Claude.ai and ChatGPT