code-reviewer

Use when reviewing Spring Boot 4 / Java 17+ code with concrete files or diffs — pull requests, modules, or pasted Java/Spring sources — for migration risks, architecture boundary leaks, JSpecify null-safety gaps, security flaws, performance regressions, or Spring Data pitfalls. Not for Kotlin-only code, non-Spring frameworks, or generic review advice without code context.

2.10x

Quality

89%

Does it follow best practices?

Impact

99%

2.10x

Average score across 3 eval scenarios

Securityby

Passed

No findings from the security scan

Evaluation results

99%

20%

Product Catalog Service — Pre-Launch Performance Review

Spring Boot performance review with virtual thread workload analysis

Criteria

Without this skill

With this skill

Virtual threads not recommended

33%

100%

Workload concurrency cited

100%

N+1 lazy load flagged

100%

Unbounded findAll flagged

100%

Dead-code Caffeine bean

100%

Unbounded cache / no effective TTL

100%

Thread-pinning synchronized block

100%

HikariCP pool not tuned

100%

Missing readOnly transactions

12%

100%

Full entity instead of projection

25%

87%

File path and line numbers cited

100%

99%

Security and Architecture Review: E-Commerce REST API

Spring Boot 4 security and architecture review

Criteria

Without this skill

With this skill

Citation completeness

90%

Controller-repository shortcut

100%

JPA entity in API response

100%

Missing authorization on admin endpoint

100%

Weak password hashing

100%

Sensitive data in logs

100%

SQL injection via string concatenation

100%

Deprecated JJWT API

100%

SSRF risk flagged

100%

Whitelist URL validation recommended

100%

Native deserialization risk

100%

Deprecated Spring null annotations

100%

Missing @NullMarked package declaration

100%

Missing nullability annotation on override

100%

38%

Spring Boot 4 Upgrade Review: user-service

Spring Boot 4 migration code review

Criteria

Without this skill

With this skill

Web starter flagged

100%

AOP starter flagged

100%

Jackson group IDs flagged

100%

Old Jackson imports flagged

100%

Jackson2ObjectMapperBuilderCustomizer flagged

100%

@MockBean flagged

100%

@SpyBean flagged

100%

WebMvcTest import flagged

100%

TestRestTemplate flagged

100%

Missing @AutoConfigureMockMvc flagged

50%

100%

spring-retry usage flagged

80%

100%

Missing @EnableResilientMethods flagged

100%

HttpServiceProxyFactory flagged

42%

100%

Custom error class flagged

100%

@Value config flagged

100%

Java 21 not flagged

100%

Repository: a-pavithraa/springboot-skills-marketplace
Path: plugins/springboot-architecture/skills/code-reviewer/SKILL.md
Commit: 6277c14

Evaluated: 21 days ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Spring Boot 4 Upgrade Review: user-service Security and Architecture Review: E-Commerce REST API Product Catalog Service — Pre-Launch Performance Review

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.