Does this skill perform security audits?

Yes, it includes stages for scanning dependencies for known CVEs and searching the codebase for secrets, API keys, or insecure coding patterns like raw exception messages.

What build systems does this skill support?

The skill includes specialized commands and workflows for both Maven and Gradle, ensuring compatibility with the vast majority of Spring Boot projects.

How does it handle database testing?

It advocates for and provides implementation patterns using Testcontainers, allowing you to run integration tests against real PostgreSQL or other database instances instead of H2.

Can it help with code coverage?

Absolutely. It integrates with JaCoCo to report on line and branch coverage, helping you ensure that your project meets your team's testing thresholds.

When is the best time to use this skill?

It is designed to be used as a 'Verification Loop' before major git operations, such as pushing a PR or preparing a release, to catch bugs and regressions early.

Spring Boot Verification

Name: Spring Boot Verification
Author: xu-xiang

byxu-xiang

•

323

•

安全与测试

Standardizes the validation process for Spring Boot applications through automated builds, testing, security scans, and code quality analysis.

The Spring Boot Verification skill provides a comprehensive workflow for validating Java-based services before PR submission or deployment. It guides Claude through a multi-stage pipeline including parallel builds with Maven or Gradle, static code analysis using SpotBugs, PMD, and Checkstyle, and rigorous unit and integration testing with Testcontainers. By enforcing coverage thresholds and performing security audits for CVEs and hardcoded secrets, this skill ensures that Spring Boot applications meet production-grade quality and security standards before they ever hit the main branch.

主要功能

01Integration testing patterns using Testcontainers for real database validation

02Standardized verification reporting for quick 'Ready/Not Ready' decisions

03Automated static analysis with Checkstyle, PMD, and SpotBugs

04Multi-stage verification pipeline including build, analysis, and testing

05Comprehensive security scanning for dependency CVEs and leaked secrets

06323 GitHub stars

使用场景

01Pre-submission validation for Spring Boot service pull requests

02Final verification loop before staging or production deployments

03Quality assurance after major refactoring or dependency upgrades

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add xu-xiang/everything-claude-code-zh springboot-verification

For use in Claude.ai and ChatGPT

主要功能

01Integration testing patterns using Testcontainers for real database validation

02Standardized verification reporting for quick 'Ready/Not Ready' decisions

03Automated static analysis with Checkstyle, PMD, and SpotBugs

04Multi-stage verification pipeline including build, analysis, and testing

05Comprehensive security scanning for dependency CVEs and leaked secrets

06323 GitHub stars

使用场景

01Pre-submission validation for Spring Boot service pull requests

02Final verification loop before staging or production deployments

03Quality assurance after major refactoring or dependency upgrades

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add xu-xiang/everything-claude-code-zh springboot-verification

For use in Claude.ai and ChatGPT