springboot-security

Spring Boot 服务的 Spring Security 身份验证/授权、验证、CSRF、密钥、响应头、速率限制和依赖项安全最佳实践。

Quality

91%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Passed

No findings from the security scan

Quality

Content

100%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-crafted, concise security reference with executable code examples, specific tooling guidance, and a closing validation checklist. It respects the context budget while remaining highly actionable.

Dimension	Reasoning	Score
Conciseness	Lean bullet-pointed guidance with no padding or explanation of concepts Claude already knows; code snippets are tight and every section earns its place.	3 / 3
Actionability	Provides copy-paste-ready executable Java (JwtAuthFilter, security DSL for CSRF and headers) and names specific tools/annotations (@PreAuthorize, @Valid, Bucket4j, OWASP Dependency Check) rather than abstract direction.	3 / 3
Workflow Clarity	Organized as a security review reference culminating in a '发布前检查清单' pre-release checklist that serves as an explicit validation checkpoint, appropriate for a review skill.	3 / 3
Progressive Disclosure	A self-contained, well-organized single file with clearly delineated sections and no nested or external references — appropriate structure for this scoped checklist content.	3 / 3
	Total	12 / 12 Passed

Description

82%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A specific, well-scoped description naming concrete security domains, but it omits an explicit 'Use when…' trigger clause, so it answers what but not when. Adding a usage trigger would raise completeness.

Suggestions

Append an explicit 'Use when…' trigger clause (e.g., 'Use when adding auth, handling input, or securing Spring Boot endpoints') so the description answers both what and when.

Include a couple of common natural phrasings users might say (e.g., 'Spring Security', 'secure my Spring Boot API') to reinforce trigger terms.

Dimension	Reasoning	Score
Specificity	Lists multiple concrete security domains — '身份验证/授权、验证、CSRF、密钥、响应头、速率限制和依赖项安全' — rather than vague language, matching the anchor that names several specific actions/areas.	3 / 3
Completeness	It clearly states what the skill covers but has no 'Use when…' clause or equivalent explicit trigger guidance, which per the rubric caps completeness at 2 (when is only implied).	2 / 3
Trigger Term Quality	Contains natural terms a user would say when needing this skill — 'Spring Boot', 'Spring Security', authentication, CSRF, rate limiting — giving good coverage of common phrasings.	3 / 3
Distinctiveness Conflict Risk	Scoped specifically to Spring Boot / Spring Security, a clear niche with distinct triggers unlikely to conflict with unrelated skills.	3 / 3
	Total	11 / 12 Passed

Validation

100%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository: xu-xiang/everything-claude-code-zh
Path: docs/ja-JP/skills/springboot-security/SKILL.md
Commit: dfbf946

Reviewed: 29 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.