The Agent Skills Directory

[SAFE]: The skill provides standard enterprise patterns for Spring Boot development, emphasizing constructor-based dependency injection, layered architecture, and comprehensive testing suites.
[SAFE]: Secure configuration practices are explicitly enforced, specifically forbidding hardcoded credentials and recommending the use of environment variables or Kubernetes Secrets for sensitive data management.
[SAFE]: Deployment templates for Kubernetes include security best practices such as running containers as non-root users and implementing automated TLS management via cert-manager and Spring Boot SSL bundles.
[INDIRECT_PROMPT_INJECTION]: The skill provides templates for building REST APIs that ingest untrusted user data, creating a potential attack surface that is mitigated by built-in security controls.
Ingestion points: REST controllers like ProductController (SKILL.md) and UserController (references/web.md) using @RequestBody.
Boundary markers: Strong separation of concerns through the use of immutable DTO records and explicit response mapping.
Capability inventory: Persistence operations via JPA repositories and external network communication through RestClient.
Sanitization: Systematic use of Java Bean Validation annotations (e.g., @NotBlank, @Size, @Pattern) to ensure all incoming data conforms to expected formats before processing.

spring-boot