springboot-security

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

1.29x

Quality

75%

Does it follow best practices?

Impact

96%

1.29x

Average score across 3 eval scenarios

Securityby

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./docs/ja-JP/skills/springboot-security/SKILL.md

Evaluation results

100%

21%

Document Management Platform: Secure Upload Endpoint

Rate limiting, file upload security, and safe logging

Criteria

Without this skill

With this skill

Bucket4j rate limiting

100%

429 status on limit exceeded

100%

Retry-After hint included

37%

100%

Burst logging

100%

File size validation

100%

Content-type validation

100%

File extension validation

100%

Storage outside web root

100%

No sensitive data in logs

100%

Structured JSON logging

100%

OWASP Dependency Check in build

100%

Build fails on CVEs

100%

90%

10%

Patient Portal: Secure User Registration and Search

Input validation, SQL safety, and secret management

Criteria

Without this skill

With this skill

@Valid in controller

100%

@NotBlank on string fields

100%

@Email annotation used

100%

@Size annotation used

100%

HTML sanitization

100%

Spring Data repository or parameterized query

100%

No SQL string concatenation

100%

:param binding in native query

100%

No hardcoded secrets in config

100%

Env var placeholders in config

100%

BindingResult or exception handler

100%

36%

Secure a Fintech Payment REST API with Spring Security

JWT auth filter and security configuration

Criteria

Without this skill

With this skill

Stateless JWT preference

100%

OncePerRequestFilter extension

100%

Bearer prefix extraction

100%

SecurityContextHolder population

100%

@EnableMethodSecurity present

100%

@PreAuthorize usage

100%

Deny-by-default

100%

CSRF disabled for API

100%

STATELESS session policy

100%

CSP header configured

100%

frameOptions sameOrigin

100%

xssProtection enabled

100%

Referrer policy NO_REFERRER

100%

Repository: affaan-m/ECC
Path: docs/ja-JP/skills/springboot-security/SKILL.md
Commit: e04ea0b

Evaluated: 6 months ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Secure a Fintech Payment REST API with Spring Security Patient Portal: Secure User Registration and Search Document Management Platform: Secure Upload Endpoint

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.