The Agent Skills Directory

[SAFE]: The skill provides comprehensive guidelines for building REST controllers using Spring Boot 3.2+, emphasizing the separation of concerns by delegating business logic to services and using DTOs for data transfer.\n- [SAFE]: Secure data handling is promoted by instructing developers to return DTOs instead of JPA entities, which prevents accidental exposure of internal database structures and sensitive fields.\n- [SAFE]: The skill implements robust input validation through Java Bean Validation (@Valid, @NotNull, etc.) and custom validators, which helps prevent malformed data from reaching the business layer.\n- [SAFE]: Error handling practices follow industry standards (RFC 9457 ProblemDetail) and explicitly advise against exposing stack traces or internal details in production responses, reducing the risk of information leakage.\n- [SAFE]: CORS configuration guidelines follow the principle of least privilege by specifying allowed origins, methods, and headers rather than using wildcards.

spring-web