spring-boot-engineer
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality, standard architectural patterns for Java-based microservices using Spring Boot 3, Spring Security 6, and Spring Cloud. All code snippets follow modern industry standards for Spring Framework development.\n- [SAFE]: Security best practices are explicitly enforced throughout the skill, such as prohibiting hardcoded credentials in configuration files and requiring input validation on all mutating API endpoints.\n- [SAFE]: Configuration examples demonstrate secure secret management by referencing environment variables (e.g.,
${JWT_SECRET},${GIT_PASSWORD}) instead of plain-text values in properties or YAML files.\n- [SAFE]: Provided Spring Security configurations include appropriate defaults for CORS (restricting origins to localhost or specific domains) and CSRF protection mechanism examples.\n- [SAFE]: Infrastructure-as-code examples, including Docker and Kubernetes configurations, utilize well-known, trusted base images and standard health check probes (Liveness/Readiness via Spring Boot Actuator).
Audit Metadata