What static analysis tools are included?

It integrates industry-standard tools including SpotBugs for bug detection, PMD for code flaws, and Checkstyle for coding standards.

What does the final verification report include?

The report provides a clear Pass/Fail status for build, analysis, testing, and security phases, along with specific metrics like test coverage percentage and CVE counts.

How does it handle security vulnerabilities?

The skill includes phases for OWASP dependency-check to find CVEs in libraries and git-secrets to prevent accidental credential leaks.

Does this skill support both Maven and Gradle?

Yes, the skill provides specific command sets for both Maven and Gradle build tools across all verification phases.

Can I use this for non-Spring Boot Java projects?

While optimized for Spring Boot conventions, most of the Maven and Gradle verification commands are compatible with any standard Java project.

Spring Boot Verification Loop

Name: Spring Boot Verification Loop
Author: oabdelmaksoud

byoabdelmaksoud

0•

Security & Testing

Validates Spring Boot projects through automated builds, static analysis, comprehensive testing, and security scanning.

This skill provides a standardized verification lifecycle for Spring Boot applications, ensuring code quality and security standards are met before pull requests or deployments. It guides Claude through a six-phase process including Maven/Gradle builds, multi-tool static analysis (SpotBugs, PMD, Checkstyle), unit testing with JaCoCo coverage reporting, and OWASP dependency checks. By implementing this loop, developers can maintain high-quality codebases with consistent formatting, meaningful error handling, and a robust security posture while receiving rapid feedback on local changes.

Key Features

01Standardized verification reporting template for PR summaries

02Multi-phase verification: Build, Static Analysis, Test, Security, Lint, and Review

03Integrated static analysis using SpotBugs, PMD, and Checkstyle

04Security auditing via OWASP dependency-check and git-secrets scanning

050 GitHub stars

06Support for both Maven and Gradle build systems

Use Cases

01Continuous local verification during long development sessions to catch regressions early

02Pre-PR validation to ensure code meets quality and coverage gates

03Security auditing of third-party dependencies before production releases

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add oabdelmaksoud/agention springboot-verification

For use in Claude.ai and ChatGPT

Key Features

01Standardized verification reporting template for PR summaries

02Multi-phase verification: Build, Static Analysis, Test, Security, Lint, and Review

03Integrated static analysis using SpotBugs, PMD, and Checkstyle

04Security auditing via OWASP dependency-check and git-secrets scanning

050 GitHub stars

06Support for both Maven and Gradle build systems

Use Cases

01Continuous local verification during long development sessions to catch regressions early

02Pre-PR validation to ensure code meets quality and coverage gates

03Security auditing of third-party dependencies before production releases

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add oabdelmaksoud/agention springboot-verification

For use in Claude.ai and ChatGPT