Can I use this for existing Spring Boot projects?

Absolutely. It is designed to be activated on any Spring Boot service to audit current health and maintain standards moving forward.

How does it handle security audits?

The skill runs OWASP dependency checks to find known CVEs and performs grep-based scans to identify hardcoded secrets in the source code.

What build tools does this skill support?

It provides full support for both Maven and Gradle, including common plugins for testing, static analysis, and security reporting.

Does it include integration testing patterns?

Yes, it specifically includes patterns for Testcontainers to run tests against real databases and MockMvc for controller-layer testing.

Spring Boot Verification Loop

Name: Spring Boot Verification Loop
Author: nbossn

bynbossn

0•

安全与测试

Automates a comprehensive verification pipeline for Spring Boot applications including building, testing, static analysis, and security scanning.

The Spring Boot Verification Loop skill provides a standardized, multi-phase workflow to ensure Spring Boot services are production-ready. It guides Claude through a rigorous check of the build process, static code analysis using tools like SpotBugs and Checkstyle, unit and integration testing with MockMvc and Testcontainers, and code coverage metrics via JaCoCo. Additionally, it incorporates security audits to detect CVEs and hardcoded secrets, ensuring that every code change meets high quality and safety standards before being merged or deployed.

主要功能

01Integration testing patterns with Testcontainers and MockMvc

02Standardized verification report generation for PR reviews

030 GitHub stars

04Security scanning for dependency CVEs and exposed secrets

05Automated multi-phase verification (Build, Analysis, Tests, Security)

06Code coverage validation using JaCoCo thresholds

使用场景

01Post-refactoring integrity checks for complex Spring Boot services

02Pre-deployment security and build verification for production environments

03Pre-PR validation to ensure code quality and test coverage

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add nbossn/claude-code-base springboot-verification

For use in Claude.ai and ChatGPT

主要功能

01Integration testing patterns with Testcontainers and MockMvc

02Standardized verification report generation for PR reviews

030 GitHub stars

04Security scanning for dependency CVEs and exposed secrets

05Automated multi-phase verification (Build, Analysis, Tests, Security)

06Code coverage validation using JaCoCo thresholds

使用场景

01Post-refactoring integrity checks for complex Spring Boot services

02Pre-deployment security and build verification for production environments

03Pre-PR validation to ensure code quality and test coverage

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add nbossn/claude-code-base springboot-verification

For use in Claude.ai and ChatGPT