When should I run the Spring Boot verification skill?

It is best used before submitting a PR, after major architectural changes, or every 30-60 minutes during long development sessions for rapid feedback.

What static analysis tools are included in the loop?

The verification loop integrates SpotBugs, PMD, and Checkstyle to ensure code adheres to industry-standard quality patterns.

How does it handle test coverage?

It utilizes Jacoco to generate detailed coverage reports, helping developers ensure they meet the recommended 80% line and branch coverage threshold.

Does this skill support both Maven and Gradle?

Yes, the skill is configured with specific commands and workflows for both Maven and Gradle build systems.

Can this skill identify security vulnerabilities?

Yes, it incorporates OWASP dependency-check for identifying CVEs and git-secrets to prevent the accidental commitment of sensitive data.

Spring Boot Verification Loop

Name: Spring Boot Verification Loop
Author: unju-ai

byunju-ai

0•

安全与测试

Orchestrates a comprehensive verification pipeline for Spring Boot applications including builds, testing, security audits, and code quality checks.

This skill provides a structured, multi-stage verification loop specifically designed for Spring Boot environments to ensure code quality and security before Pull Requests or deployments. It guides Claude through a rigorous six-stage process—covering multi-threaded Maven/Gradle builds, static analysis with SpotBugs and PMD, unit testing with Jacoco coverage reporting, security vulnerability scanning, and detailed diff reviews—to prevent regressions and maintain production-grade standards.

主要功能

01Automated Jacoco coverage reporting for line and branch analysis

020 GitHub stars

03Standardized verification report generation for PR documentation

04Automated multi-stage verification (Build, Analysis, Test, Security, Diff)

05Deep integration with SpotBugs, PMD, and Checkstyle for static analysis

06Security auditing using OWASP dependency-check and git-secrets scanning

使用场景

01Performing periodic security and dependency audits on Spring Boot services

02Finalizing features before opening a Pull Request to ensure zero regressions

03Automating code quality enforcement during large-scale refactoring sessions

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add unju-ai/ecc springboot-verification

For use in Claude.ai and ChatGPT

主要功能

01Automated Jacoco coverage reporting for line and branch analysis

020 GitHub stars

03Standardized verification report generation for PR documentation

04Automated multi-stage verification (Build, Analysis, Test, Security, Diff)

05Deep integration with SpotBugs, PMD, and Checkstyle for static analysis

06Security auditing using OWASP dependency-check and git-secrets scanning

使用场景

01Performing periodic security and dependency audits on Spring Boot services

02Finalizing features before opening a Pull Request to ensure zero regressions

03Automating code quality enforcement during large-scale refactoring sessions

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add unju-ai/ecc springboot-verification

For use in Claude.ai and ChatGPT