菜单
Comprehensive guidelines, patterns, and best practices for Spring Boot 3.x application development — covering REST APIs, data access, security, observability, async patterns, testing, and production readiness.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
基于 SOC 职业分类
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/susamn/aistuff --skill java-spring-framework-generic命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
Manage the dotfiles repository, stow packages, and configure agent skills. Use when adding a skill, modifying the stow setup, or working inside ~/dotfiles.
Practice LeetCode problems in a 3-tab mosaic dashboard (Problem, Intuition, Solution — Python + Go). Starter-seeded with 100 classic problems; add, swap, or remove any problem by URL or description. Use when asked to practice LeetCode, add/swap a coding-interview problem, or open the LeetCode practice dashboard.
Import external skills from Git repositories, local directories, or web URLs into the local skills library, adapting them to house conventions, auditing, and suggesting cross-skill integrations. Use when importing a skill, bringing in an external skill, or adding a skill from GitHub.
| name | java-spring-framework-generic |
| description | Comprehensive guidelines, patterns, and best practices for Spring Boot 3.x application development — covering REST APIs, data access, security, observability, async patterns, testing, and production readiness. |
| version | 2.0.0 |
| kind | guidance |
| triggers | ["work on spring boot project","create spring boot application","spring rest api","spring data jpa","spring security","spring boot backend","spring framework"] |
| intent | execution |
| guardrails | ["Target Spring Boot 3.x (Jakarta EE 10+) and Java 21 LTS unless the project is explicitly pinned to an older version.","Always use constructor injection. Never field injection (@Autowired on fields), and setter injection only for genuinely optional dependencies.","Never expose JPA entities from REST controllers. Use dedicated DTO/record types for request and response payloads.","Annotate service-layer write operations with @Transactional. Never annotate controller methods.","Do not use System.out.println. Use SLF4J with parameterized messages.","Never hardcode secrets. Bind @ConfigurationProperties to environment variables or a secrets manager.","Validate incoming payloads with Jakarta Bean Validation (@Valid / @Validated) at the controller boundary — never in the service layer.","When starting a new app, check for an existing OpenAPI schema and build to it. Starting from scratch, write the schema before the implementation.","Always use MockMvc for testing REST controllers.","Use SDKMAN environment variables (JAVA_HOME, JAVA21_HOME, SDKMAN_CANDIDATES_DIR) when present.","When M2_HOME is set it is the shared Maven local repository — pass it through (-Dmaven.repo.local=\"$M2_HOME\") rather than letting the build default to ~/.m2.","Always build via the project wrapper (./mvnw or ./gradlew), never a globally installed tool."] |
| tools | ["bash"] |
| created_at | 2026-05-30T00:00:00.000Z |
| updated_at | 2026-07-29T00:00:00.000Z |
Spring Boot 3.x on Java 21. The guardrails above apply to every task; the references below carry the detail for whichever layer you are working in.
| file | when |
|---|---|
references/foundations.md | starting or restructuring an app — version baseline, project layout, DI, configuration |
references/web-layer.md | REST controllers and the service layer |
references/data-access.md | repositories, entities, queries, transactions (Spring Data JPA) |
references/errors-validation.md | error responses, exception handlers, request validation |
references/security.md | authentication, authorization, filter chains |
references/testing.md | writing or reviewing tests |
references/operations.md | observability, async/concurrency, domain events, caching |
references/api-and-release.md | OpenAPI documentation, production readiness checklist |
When a task spans layers, load only the references it actually touches — these are deliberately separable.