Skill UI

Specialized skill for designing, building, and optimizing modern, cloud-native enterprise Java applications. Covers microservices architecture, Spring Boot 3.x, reactive programming (WebFlux), advanced data persistence (JPA optimization, R2DBC), and robust security implementation (OAuth2/JWT). Use this when implementing DDD patterns, ensuring high test coverage, and managing complex transaction boundaries.

Guides Spring Boot 3.x engineers through configuration scaffolds, REST controllers, Spring Security 6 authentication flows, Spring Data JPA repositories, and reactive WebFlux endpoints, making it easier to build microservices and Java REST APIs.

Checklist covering Spring Security best practices for authentication, authorization, validation, CSRF, secrets, headers, rate limiting, dependency scans, and logging in Java Spring Boot services.

Structured pre-PR verification loop for Spring Boot projects that runs fast-build checks, static analysis, tests with coverage, security scans, formatting gates, and diff reviews to catch issues before deployment.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

This guide covers essential security best practices for Spring Boot applications. Learn how to implement robust authentication (JWT, OAuth2), authorization using method security, secure input validation, prevent SQL injection, manage secrets, and configure vital security headers (CORS, CSRF). Essential for building production-ready, secure Java backend services.

A comprehensive CI/CD quality gate checklist for Spring Boot projects. It guides developers through mandatory steps including building, static analysis (SpotBugs, PMD), running unit/integration tests, measuring code coverage, performing security scans (OWASP), and reviewing diffs before merging or deploying.

A security assessment tool designed to identify specific vulnerabilities in Spring Boot applications, such as exposed Actuator endpoints, H2 Console access, SpEL injection, and memory dumps containing secrets. Requires explicit written authorization for authorized security assessments.