Skip to content
alyn
rrezartprebreza

spring-boot-skills

Production-grade Claude Code and Codex skills for Spring Boot developers

$npx skills add rrezartprebreza/spring-boot-skills
Stars
353
Installs
3k
Forks
56
Updated
4 h ago
License
MIT

rrezartprebreza

Spring Boot Skills

Open on GitHub

82 skills in this pack.

rrezartprebreza

Spring Boot Skills

56
rrezartprebreza

agent-qa-browser-regression

Use when verifying an existing browser journey with agent-qa against a running Spring Boot application. Covers target selection, scoped execution, run evidence, and memidex provenance while…

Pack3533kTesting

rrezartprebreza

Spring Boot Skills

56
rrezartprebreza

ai-observability

Use when adding Spring AI-specific model observations, token usage, latency, externally configured cost attribution, advisor telemetry, or protected prompt and completion logging. Use…

Pack3533kDevOps

rrezartprebreza

Spring Boot Skills

56
rrezartprebreza

domain-driven-design

Use when evolving aggregate invariants, value objects or domain events in an existing DDD-style Spring Boot 3 application, or when DDD is explicitly requested. Preserve existing API…

Pack3533kDesign

rrezartprebreza

Spring Boot Skills

56
rrezartprebreza

flyway-migrations

Use when creating database migrations, schema changes, seed data, or any SQL that modifies database structure. Covers Flyway naming conventions, versioning, and safe migration patterns.

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

56
rrezartprebreza

java-supply-chain-security

Use when reviewing Maven or Gradle dependency risk, SBOM coverage, vulnerability findings, or Java release provenance. Covers compatible remediation and CI trust boundaries; container…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

56
rrezartprebreza

layered-architecture

Use when generating or modifying any Spring Boot class — controllers, services, repositories, DTOs, mappers, or configuration. Enforces strict layer separation and prevents business logic…

Pack3533kCoding

rrezartprebreza

Spring Boot Skills

56
rrezartprebreza

multi-module-maven

Use when working in a multi-module Maven project. Covers parent POM conventions, shared dependency management, inter-module rules, and build ordering.

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

56
rrezartprebreza

oauth2-resource-server

Use when configuring Spring Boot as an OAuth2 resource server, validating JWTs from an external auth provider (Keycloak, Auth0, Okta, Cognito), extracting claims, or implementing…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

56
rrezartprebreza

openapi-first

Use when the project follows API-first / OpenAPI-first approach: generating controller interfaces, DTOs, and clients from an OpenAPI spec. Use when you see openapi.yaml…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

56
rrezartprebreza

rest-api-conventions

Use when generating REST controllers, DTOs, success response contracts, pagination, HTTP status mapping, or API versioning. For RFC 9457 exception and error response formatting, use…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

56
rrezartprebreza

spring-ai-integration

Use when integrating LLMs, chat clients, embeddings, RAG pipelines, or AI agents into Spring Boot. Covers Spring AI ChatClient, prompt templates, embeddings, vector stores, and structured…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

56
rrezartprebreza

spring-batch

Use when building batch jobs, ETL pipelines, scheduled imports/exports, or any chunk-oriented bulk processing with Spring Batch. Covers the Spring Batch 5 / Boot 3 builder API…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

55
rrezartprebreza

hateoas

Use when adding hypermedia links to REST responses, building self-describing APIs, or implementing Spring HATEOAS. Use when you see EntityModel, CollectionModel, or RepresentationModel in…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

55
rrezartprebreza

hexagonal-architecture

Use when the project follows hexagonal (ports & adapters) architecture. Prevents domain code from depending on Spring or JPA. Use when you see packages like domain/, application/…

Pack3533kCoding

rrezartprebreza

Spring Boot Skills

55
rrezartprebreza

multi-tenancy

Use when implementing tenant resolution, database or schema isolation, tenant-aware JPA, reactive tenant context, migrations, caching, jobs, or authorization in Spring Boot 3.

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

54
rrezartprebreza

async-execution

Use when adding or debugging Spring @Async work, executor saturation, asynchronous failures or lost thread context. Not a substitute for durable jobs or reactive pipelines.

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

54
rrezartprebreza

configuration-properties

Use when introducing or correcting grouped Spring Boot configuration, typed property binding, validation, profiles or secret injection. Do not rewrite unrelated single-value configuration.

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

54
rrezartprebreza

mcp-server

Use when exposing Spring Boot 3 application capabilities through Model Context Protocol tools, resources, or prompts. Covers Spring AI 1.x tool callback registration, transports, schemas…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

54
rrezartprebreza

resilience-retry

Use when adding retries, backoff, or concurrency protection to Spring Boot 3 / Spring Framework 6 services. Covers Spring Retry or Resilience4j selection, proxy behavior, and transaction…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

54
rrezartprebreza

scheduled-tasks

Use when creating or reviewing @Scheduled jobs, cron/time-zone configuration, overlapping runs or multi-instance scheduling. Not for Spring Batch chunk/restart mechanics or arbitrary async…

Pack3533kProductivity

rrezartprebreza

Spring Boot Skills

54
rrezartprebreza

security-audit-logging

Use when designing or reviewing security audit events, their redaction, durable storage, integrity, or failure policies in Spring Boot. General metrics and debugging logs belong to…

Pack3533kSecurity

rrezartprebreza

Spring Boot Skills

54
rrezartprebreza

spring-ai-security

Use when threat-modeling or hardening a Spring AI RAG, chat, or tool-calling workflow against prompt injection, unauthorized actions, data exposure, or unbounded execution. Ordinary…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

53
rrezartprebreza

container-native-deployment

Use when packaging a Spring Boot 3 application as an OCI image or GraalVM native executable. Covers buildpacks, layered images, JVM containers, AOT hints, probes, security, and verification.

Pack3533kDevOps

rrezartprebreza

Spring Boot Skills

53
rrezartprebreza

http-interface-clients

Use when calling external HTTP APIs from Spring Boot 3 / Spring Framework 6 with declarative HttpExchange interfaces. Covers manual proxy registration, RestClient versus WebClient, and…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

53
rrezartprebreza

idempotency-patterns

Use when making retried HTTP commands or message processing safe against duplicate effects, including database-backed request keys, payload conflicts and concurrent retries. Do not apply…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

53
rrezartprebreza

problem-details-rfc9457

Use when implementing exception mapping or RFC 9457 error responses in Spring Boot 3. Preserve an existing legacy error contract unless migration is requested.

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

52
rrezartprebreza

event-driven-messaging

Use when implementing Kafka, RabbitMQ, Pulsar, or JMS producers and consumers in Spring Boot 3. Covers event contracts, idempotency, retries, dead-letter handling, ordering, and outbox…

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

52
rrezartprebreza

production-observability

Use when adding service-wide Spring Boot 3 Actuator, Micrometer metrics, distributed tracing, OpenTelemetry export, structured logging, health probes, dashboards, or alerts. Combine with…

Pack3533kDevOps

rrezartprebreza

Spring Boot Skills

51
rrezartprebreza

api-versioning

Use when versioning Spring MVC or WebFlux APIs in Spring Boot 3 / Spring Framework 6. Covers explicit URL, header, and media-type strategies, compatibility rules, and deprecation handling.

Pack3533kBackend

rrezartprebreza

Spring Boot Skills

51
rrezartprebreza

null-safety

Use when annotating nullability in Spring Boot 3 / Spring Framework 6 code, integrating Kotlin, or adding static nullability checks without assuming Spring Framework 7 JSpecify defaults.

Pack3533kBackend

Showing 30 of 82. See the full pack on GitHub.

From the README

How to use spring-boot-skills

spring-boot-skills — production-grade Claude Code and Codex skills for Spring Boot

Production-grade Spring Boot skills for Claude Code and Codex. Drop a skill into your project and your AI coding agent instantly understands your architecture, patterns, and conventions.


skills Spring Boot Java License

Claude Code Codex Spring AI MCP Java SDK GitHub Stars XERJ Corpus Hub contributor


Quick Start · Skills Catalog · Before / After · Skill Anatomy · Contributing


Why this exists

AI coding agents are great at Python. They hallucinate in Spring Boot.

They generate @Autowired field injection instead of constructor injection. They use ResponseEntity<?> where you have a standard response wrapper. They ignore your existing exception hierarchy and invent a new one. They don't know your project uses Flyway, so they generate schema SQL by hand. They emit pre-GA Spring AI artifact names that no longer exist in Maven Central.

Skills fix this. A skill is a markdown file your agent reads before touching your code. It tells the agent your conventions, your stack, your gotchas — not generic Spring Boot from 2020.

flowchart LR
    A["💬 You ask:<br/>&quot;add an orders endpoint&quot;"] --> B{Agent matches<br/>skill triggers}
    B -->|"REST code?"| C["📜 rest-api-conventions"]
    B -->|"persistence?"| D["📜 spring-data-jpa"]
    C --> E["🤖 Agent codes with<br/>YOUR envelope, YOUR<br/>status mapping, YOUR<br/>pagination contract"]
    D --> E
    E --> F["✅ Code that looks like<br/>your team wrote it"]

    style A fill:#0f172a,stroke:#38bdf8,color:#e2e8f0
    style B fill:#1e293b,stroke:#94a3b8,color:#e2e8f0
    style C fill:#10241a,stroke:#6DB33F,color:#a7f3d0
    style D fill:#10241a,stroke:#6DB33F,color:#a7f3d0
    style E fill:#0f172a,stroke:#d97757,color:#e2e8f0
    style F fill:#10241a,stroke:#6DB33F,color:#a7f3d0

This repo is a collection of battle-tested skills. Copy, adapt, drop in.


Verify your conventions with AgentAccord

AgentAccord is a free, MIT-licensed companion tool for checking team engineering rules in source code and AI instruction files.

Spring Boot Skills teaches your agent how to work. AgentAccord checks supported rules your team has explicitly approved. It can flag field injection in application code, conflicting instructions in AGENTS.md, CLAUDE.md, and SKILL.md, and policy violations in supported Java examples. Run it locally through its CLI or browser app, or use its GitHub Action in CI.

Choose policies that fit your project. For example, restrictions on @Value or @WebMvcTest are optional team decisions, not universal Spring Boot rules. AgentAccord checks a defined set of patterns; it does not automatically enforce every recommendation in this skills catalog.

Get started with AgentAccord · See the v0.4.0 release


🧠 Concepts

Concept Description
Skills Markdown files loaded into Claude Code or Codex context — tell the agent how to work in your codebase
CLAUDE.md / AGENTS.md Project-level persistent memory — your agent's onboarding doc
MCP Java SDK Official Java SDK for building MCP servers — connect your Spring Boot app to any AI agent
Marketplace plugins Versioned Claude Code and Codex packages for all Boot 3 or Boot 4 skills
Project templates Ready-to-adapt CLAUDE.md and AGENTS.md guidance for Boot 3 and Boot 4 projects
Planned workflows Repeatable commands such as /generate-endpoint, /write-test, and /db-migrate are listed in the roadmap

📦 Skills

The catalog ships in two version trees — pick the folder that matches your stack. Shared topics normally have both flavors; genuinely version-specific topics may live only in the relevant tree.

Folder Target stack Compatibility baseline
skills/spring-boot-4/ Spring Boot 4.x · Spring Framework 7 · Spring Security 7 · Spring Batch 6 · Jackson 3 · Spring AI 2.0 Java 17+; examples use Java 21; Boot 4.0.x and 4.1.x
skills/spring-boot-3/ Spring Boot 3.x · Spring Framework 6 · Spring Security 6 · Spring Batch 5 · Jackson 2 · Spring AI 1.x Java 17+; examples use Java 21

Drop any skill folder into your agent's skills directory. Claude Code users can copy them to .claude/skills/; Codex users can adapt the same SKILL.md folders for .codex/skills/. The catalog below links to the Spring Boot 4 versions — swap spring-boot-4 for spring-boot-3 in any path if you're still on Boot 3.

The version guidance follows the Spring Boot 4 system requirements, the Spring Boot 4 migration guide, and Spring AI's compatibility guidance. Check the official release notes before upgrading a project.

Fast-moving integrations were last verified in August 2026 against Spring Boot 4.1, Spring AI 2.0, MCP Java SDK 2.0, Spring Cloud 2025.1, and Spring Cloud Gateway 5.0. Keep BOM-managed dependency versions together and recheck the linked official sources before adopting a newer release line.

Configuration

Skill Description Tags
configuration-properties Typed binding, startup validation, duration units and secret handling. configuration validation

🏗️ Architecture

Skill Description Tags
layered-architecture Enforces Controller → Service → Repository separation. Prevents business logic leaking into controllers or repositories. architecture
hexagonal-architecture Ports and adapters pattern for Spring Boot. Keeps domain clean of framework dependencies. architecture ddd
domain-driven-design Aggregates, value objects, domain events with commit-safe publication. Includes JPA mapping conventions. ddd jpa
multi-module-maven Parent POM conventions, shared BOM, inter-module dependency rules. Prevents circular deps. maven architecture
spring-modulith Module boundaries, verification and durable event publication. architecture modulith
multi-tenancy Tenant resolution, database/schema isolation, tenant-aware persistence, caches, jobs, and migrations. architecture security data

🔌 API Design

Skill Description Tags
rest-api-conventions Your project's response envelope, error codes, pagination contract, versioning strategy. Fill in the template. rest api
openapi-first Generate controllers and DTOs from OpenAPI spec. Uses openapi-generator-maven-plugin. openapi codegen
problem-details-rfc9457 RFC 9457 compliant error responses with Spring's ProblemDetail. Replaces ad-hoc error envelopes. error-handling rest
idempotency-patterns Concurrent retries, scoped request keys, replay and transaction boundaries. api transactions
hateoas Spring HATEOAS link building conventions. Teaches agent when and how to add hypermedia links. hateoas rest

🌐 Edge & Reactive

Skill Description Tags
spring-cloud-gateway Secure route design, header hygiene, timeouts, rate limits, retries, and release-train compatibility. gateway spring-cloud security
webflux-reactive-patterns Non-blocking WebFlux, Reactor context, R2DBC, backpressure, cancellation, and reactive tests. webflux reactor r2dbc

🗄️ Data & Persistence

Skill Description Tags
spring-data-jpa Boot 4 JPA with Hibernate 7: entity modeling, Jakarta imports, relationships, projections, N+1 prevention, keyset pagination, and batch writes. jpa hibernate
flyway-migrations Migration naming convention, safe multi-step schema changes, team workflow for concurrent migrations. flyway migrations
spring-data-redis Cache-aside pattern, key naming, TTL strategy, stampede protection, serialization config. redis caching
transactional-patterns @Transactional propagation rules, self-invocation pitfall, after-commit side effects, saga pattern. transactions

📨 Messaging

Skill Description Tags
event-driven-messaging Kafka/RabbitMQ/Pulsar/JMS contracts, idempotent consumers, outbox delivery, retries, and dead letters. messaging kafka rabbitmq

⚙️ Batch & Jobs

Skill Description Tags
scheduled-tasks Cron/time zones, disabled triggers, bounded sweeps, replica coordination and recovery boundaries. scheduling jobs
async-execution Named bounded executors, rejection, failed futures, context isolation and transaction boundaries. async concurrency
spring-batch Spring Batch 6 chunk jobs, JDBC versus resourceless repositories, JobOperator, restartability, reader sort/thread-safety, and transaction boundaries. batch etl

🚀 Migration & Deployment

Skill Description Tags
spring-boot-migration Staged Boot 3.5 → 4 migration covering modular starters, Jackson 3, tests, servers, and verification. migration spring-boot-4
container-native-deployment Buildpacks, layered OCI images, JVM containers, GraalVM native images, AOT hints, and probes. containers graalvm aot

🧰 Framework 7 Core

Skill Description Tags
api-versioning Spring Framework 7 built-in API versioning: mapping versions, central request resolution, defaults, supported versions, and deprecation headers. rest api versioning
http-interface-clients Boot 4 declarative HTTP clients with @ImportHttpServices, grouped base URLs/timeouts, and RestClient versus WebClient selection. http clients
null-safety JSpecify nullability for Framework 7: @NullMarked, @Nullable, generic and array positions, Kotlin interop, and NullAway. null-safety jspecify
resilience-retry Framework 7 core @Retryable and @ConcurrencyLimit: enablement, backoff, no @Recover, proxy, and transaction pitfalls. resilience retry

🔒 Security

Skill Description Tags
spring-security-jwt JWT auth filter chain, access and refresh token validation, RBAC with method security. Opinionated starting point. security jwt
oauth2-resource-server OAuth2 resource server config, JWT claim extraction, scope-based authorization. security oauth2
spring-security-review Evidence-backed review of object authorization, tenant boundaries, untrusted inputs, and management exposure. security review
java-supply-chain-security Dependency/BOM risk, offline SBOM inventory, compatible remediation, and release provenance. security supply-chain
security-audit-logging Typed security events, privacy boundaries, durable delivery design, and explicit audit failure policies. security audit
spring-incident-response Scoped incident triage, local evidence fingerprints, redacted handoffs, and approval before containment. security operations

🤖 AI & MCP

Skill Description Tags
spring-ai-integration Spring AI ChatClient, chat memory, RAG pipeline, structured output. Real GA artifact names — no dead pre-GA coordinates. spring-ai llm
spring-ai-security Prompt-injection threat modeling, server-authorized tools, tenant-scoped retrieval, and execution budgets. spring-ai security
mcp-server Build MCP servers with the Java SDK 2.x and Spring AI 2.0 native annotations. Tool registration, Streamable HTTP, and stdio safety. mcp ai-agents
ai-observability Token usage tracking, latency monitoring, prompt/response logging for Spring AI apps. observability spring-ai

📊 Operations

Skill Description Tags
production-observability Actuator, Micrometer, OpenTelemetry/OTLP, health probes, structured logging, and actionable alerts. actuator micrometer opentelemetry

🧪 Testing

Skill Description Tags
testing-pyramid Unit → Slice → Integration conventions. @WebMvcTest, @DataJpaTest, @MockitoBean, Testcontainers. testing
agent-qa-browser-regression Scoped browser QA with agent-qa, run evidence, and memidex memory provenance alongside backend tests. testing browser

⚡ Quick Start

Website catalog

The website provides searchable Boot 3 and Boot 4 catalogs, skill pages, example previews, and installation commands for Claude Code and Codex. It is generated from this repository's skill files and verification matrix. See the website README for local development and GitHub Pages deployment.

1. Prepare your coding agent

Install Claude Code if needed:

npm install -g @anthropic-ai/claude-code

If you use Codex, confirm the CLI or desktop app command is available:

codex --version

2. Drop a skill into your project

Claude Code:

PROJECT_DIR=/path/to/my-spring-app
mkdir -p "$PROJECT_DIR/.claude/skills"
# Spring Boot 4 project
cp -r skills/spring-boot-4/rest-api-conventions "$PROJECT_DIR/.claude/skills/"
cp -r skills/spring-boot-4/spring-data-jpa "$PROJECT_DIR/.claude/skills/"

# Spring Boot 3 project — same skills, Boot 3 flavor
cp -r skills/spring-boot-3/rest-api-conventions "$PROJECT_DIR/.claude/skills/"

Codex:

PROJECT_DIR=/path/to/my-spring-app
mkdir -p "$PROJECT_DIR/.codex/skills"
# Spring Boot 4 project
cp -r skills/spring-boot-4/rest-api-conventions "$PROJECT_DIR/.codex/skills/"
cp -r skills/spring-boot-4/spring-data-jpa "$PROJECT_DIR/.codex/skills/"

# Spring Boot 3 project — same skills, Boot 3 flavor
cp -r skills/spring-boot-3/rest-api-conventions "$PROJECT_DIR/.codex/skills/"

Run these commands from the root of this repository, or replace skills/ with the path to your local clone.

For persistent project guidance, start from the matching templates:

# Codex, Spring Boot 4
cp templates/spring-boot-4/AGENTS.md "$PROJECT_DIR/AGENTS.md"

# Claude Code, Spring Boot 4
cp templates/spring-boot-4/CLAUDE.md "$PROJECT_DIR/CLAUDE.md"

Boot 3 equivalents live under templates/spring-boot-3/. Adapt commands and conventions to the project rather than using the templates unchanged.

Install from the Claude Code marketplace

This repository also exposes two marketplace plugins without duplicating the skill files:

claude plugin marketplace add rrezartprebreza/spring-boot-skills
claude plugin install spring-boot-4-skills@spring-boot-skills
# or for a Boot 3 project:
claude plugin install spring-boot-3-skills@spring-boot-skills

The marketplace manifest is .claude-plugin/marketplace.json. Validate it locally with claude plugin validate .. The repository can be submitted to Anthropic's Claude Code community marketplace; approval is a separate review step. GitHub Marketplace is intended for GitHub Apps and Actions, so this skills repository should use GitHub releases and the Claude marketplace instead.

Install as a Codex plugin

Codex uses its own plugin manifest and marketplace catalog. Add this repository and install the version that matches your application:

codex plugin marketplace add rrezartprebreza/spring-boot-skills
codex plugin add spring-boot-4-skills@spring-boot-skills
# or for a Boot 3 project:
codex plugin add spring-boot-3-skills@spring-boot-skills

The Codex package metadata lives in .agents/plugins/marketplace.json and the two plugin manifests under plugins/. Direct copying into .codex/skills/ remains supported for projects that do not use plugins.

3. Tell your agent what you want

claude
> Generate a CRUD endpoint for the Order entity following our REST conventions

or:

codex
> Generate a CRUD endpoint for the Order entity following our REST conventions

That's it. Your agent reads the skill before writing a single line.


⚔️ Before / After

The snippets below are illustrative, not captured model outputs or benchmark results. For a copyable task and a reproducible comparison procedure, see the practical walkthrough.

The value of these skills is not generic Spring Boot advice. The value is preventing the small mistakes AI agents make when they do not know your backend conventions.

❌ Without a skill ✅ With layered-architecture + rest-api-conventions
@RestController
public class OrderController {
    @Autowired
    private OrderRepository repository;

    @PostMapping("/orders")
    public ResponseEntity<?> create(
            @RequestBody Order order) {
        return ResponseEntity.ok(
            repository.save(order));
    }
}
@RestController
@RequestMapping("/api/v1/orders")
@RequiredArgsConstructor
class OrderController {
    private final OrderService orderService;

    @PostMapping
    ResponseEntity<ApiResponse<OrderResponse>> create(
            @Valid @RequestBody CreateOrderRequest request) {
        OrderResponse response = orderService.create(request);
        return ResponseEntity.status(HttpStatus.CREATED)
            .body(ApiResponse.ok(response));
    }
}
  • Business logic leaks into the controller
  • No request DTO or validation boundary
  • Repository called directly from the web layer
  • Response shape ignores project conventions
  • Status codes left to framework defaults
  • Controller as a pure HTTP adapter
  • Service owns the business rules
  • DTO validation at the boundary
  • Consistent response envelope
  • Correct 201 Created semantics

📐 Skill Anatomy

Every skill in this repo follows the same structure:

skills/spring-boot-4/rest-api-conventions/
├── SKILL.md          ← the skill: trigger description + conventions + gotchas
├── agents/
│   └── openai.yaml   ← Codex skill-list metadata and default prompt
├── examples/         ← good and bad examples, side by side
│   ├── good-controller.java
│   └── bad-controller.java
└── templates/        ← copy-paste starting points
    ├── ApiResponse.java
    └── GlobalExceptionHandler.java

SKILL.md has two critical parts:

---
name: rest-api-conventions
description: >
  Use when generating REST controllers, response objects, DTOs, or error handlers.
  Defines the project's response envelope, HTTP status mapping, and error code conventions.
---

## Conventions
...

The description is a trigger — write it as "use when [condition]", not as a summary. This is what makes the agent actually load the skill.

The Gotchas section at the bottom of each skill is the secret weapon: a running list of the exact mistakes agents make in that domain, phrased as Agent does X — do Y instead.


💡 Tips from the trenches

The Gotchas section is the most valuable part — add to it every time the agent does something wrong. Your future self will thank you.

Don't describe what Spring Boot already knows. Skills should push your agent out of its default behavior, not repeat the docs.

Be opinionated about your project. Generic Spring Boot best practices belong in a blog post. Skills belong in your agent skills folder.

Fork this repo and customize. Every team's conventions are different. These are starting points, not gospel.

Combine with CLAUDE.md or AGENTS.md. Project guidance stores build commands, verification, and architecture decisions. Skills provide reusable domain-specific workflows.

Anti-pattern Fix
Giant SKILL.md with everything Split into focused skills, one concern each
"Always use constructor injection" Already a strong agent default — skip it
No examples Add a good.java and bad.java — the contrast is what teaches
Prescriptive step-by-step instructions Give goals and constraints, let agent decide how
Never updating Add a Gotchas section, update it when agent fails

🔥 Hot: MCP Server Skill

The mcp-server skill is the most powerful one here.

It teaches your agent to build production-ready MCP servers on MCP Java SDK 2.x and the Spring AI 2.0 starters - the same protocol used by Claude, Codex, Cursor, VS Code, and other major AI coding tools.

The MCP skill distinguishes native MCP annotations such as @McpTool from Spring AI model tool-calling annotations such as @Tool. Use the native MCP path when exposing server tools.

// What the agent generates with the skill loaded —
// real GA API: spring-ai-starter-mcp-server + annotation scanning
@Component
public class OrderMcpTools {

    private final OrderService orderService;

    @McpTool(name = "get_order",
             description = "Get a single order by ID including all line items and status history")
    public OrderResponse getOrder(
            @McpToolParam(description = "UUID of the order", required = true) String orderId) {
        return OrderResponse.from(orderService.findById(UUID.fromString(orderId)));
    }
}

Without the skill, the agent guesses: dead pre-GA artifact names, removed SDK constructors, @Tool instead of native @McpTool, or System.out logging that corrupts stdio transport.


🗺️ Roadmap

  • Skills for Spring Batch
  • Spring Boot 4 versions of all 41 skills (skills/spring-boot-4/)
  • Skills for Spring Cloud Gateway
  • Skills for Spring WebFlux / reactive patterns
  • Skills for multi-tenancy
  • Spring Boot 3 → 4 migration skill
  • Production observability skill
  • Event-driven messaging skill
  • Container and native deployment skill
  • CLAUDE.md and AGENTS.md templates for Boot 3 and Boot 4
  • /generate-endpoint command
  • /write-test command
  • /db-migrate command
  • Integration with Hatch background job library
  • Integration with SpringPulse observability

🤝 Contributing

Skills get better with real-world use. If you find a gap — the agent did something stupid in your Spring Boot project — open a PR and add it to the Gotchas section of the relevant skill.

Before opening a PR, install the validator dependency in a virtual environment and run:

python3 -m venv .venv
source .venv/bin/activate
python3 -m pip install -r scripts/requirements.txt
bash scripts/validate-skills.sh

The validator parses YAML safely, rejects duplicate keys, and checks both version trees, metadata, README links and marketplace packaging. There are 41 topics with Boot 3 and Boot 4 variants.

Executable verification

The security fixture tests the shipped authorization, AI tool-boundary and audit-record templates in both version trees. Offline Python tests cover SBOM inventory and evidence fingerprints. These checks do not claim live vulnerability scanning, provider-backed prompt-injection resistance, durable audit delivery, or production incident validation.

The behavior fixture compiles the shipped JWT, Problem Details, pagination, configuration, async, scheduling and Redis limiter templates. Its tests cover token/account rejection, HTTP contracts, startup validation, bounded executor rejection, cron registration, atomic Redis admission, and JPA/Flyway against PostgreSQL. CI runs Boot 3.5 and Boot 4.1 with Java 17 and 21. The MCP compilation fixture remains separate. This is targeted coverage, not a claim that every example in the catalog has executable tests.

The AI audit fixture compiles both version trees and tests executor rejection and persistence failures without calling a model provider. Database tests cover safe Flyway baselining and an authenticated create/retrieve HTTP workflow. See the per-skill coverage matrix for the exact scope and remaining gaps.

Additional runtime checks cover external issuer/subject identity, tenant-scoped database access, Redis concurrency and serialization, and bounded HTTP read retries. The skills document failure policies and limitations rather than treating every example as a universal default.

Agent evaluations provide repeatable prompts and review criteria for Claude Code and Codex. Transcript collection and human review are separate from CI validation; a successful model invocation is not a benchmark pass.

1. Fork the repo
2. Copy an existing skill as a template
3. Fill in conventions, examples, gotchas
4. PR with a one-line description of what problem it solves

🛠️ More from the same workbench

Repo Description
AgentAccord Check approved engineering policies against source code, AI instructions, and supported Java examples — local CLI/app and GitHub Action
Hatch Multi-module background job library for Spring Boot — REST polling, retry, Redis/JDBC backends, SSE dashboard
SpringPulse Runtime observability for @Scheduled methods — AOP interception, WebSocket dashboard
rest-api-generator CLI that scaffolds Spring Boot REST APIs from plain English prompts

If a skill saved your agent from writing @Autowired field injection today — ⭐ star the repo.


spring-boot · java · claude-code · codex · mcp · spring-ai · skills · developer-tools


Built by @rrezartprebreza · Pristina, Kosovo


LinkedIn

Questions

What is rrezartprebreza/spring-boot-skills?

Production-grade Claude Code and Codex skills for Spring Boot developers

How do I install spring-boot-skills?

Run "npx skills add rrezartprebreza/spring-boot-skills" and choose the skills you want. Many packs also document their own install path (for example a Claude Code plugin marketplace) in the README below.

How many skills are in spring-boot-skills?

82 SKILL.md skills. Alyn lists 30 of them with their own pages.