skill

security-audit

Java security checklist covering OWASP Top 10, input validation, injection prevention, and secure coding. Works with Spring, Quarkus, Jakarta EE, and plain Java. Use when reviewing code security, before releases, or when user asks about vulnerabilities.

Description as published by the maintainer. Source

• slowing

slowing — Most recent push to the repository was 2026-02-08.

Signals

These are separate measurements of different things. They are deliberately not combined into one score, because a popularity number that mixes website traffic with saves and stars cannot be checked or acted on.

Will this work with your setup?

Install location suggests this is meant for claude-code. Installed under .claude/skills/, the Claude Code convention. Not a test result: we have not run it.

We have not run this skill against a task with and without it enabled, so we cannot tell you whether it improves anything, what it costs in tokens, or whether it duplicates behaviour your harness already has. When we have run that test, the result will appear on this page with the task, the versions and the budget it used.

The skill definition lives at .claude/skills/security-audit/SKILL.md in https://github.com/decebals/claude-code-java.

Where to get it

• Repository — https://github.com/decebals/claude-code-java

Related, by what their authors tagged them

• decebals-claude-code-java-api-contract-review — last commit 2026-02-08, shares ai-assisted-development, java
  Review REST API contracts for HTTP semantics, versioning, backward compatibility, and response consistency. Use when us…
• decebals-claude-code-java-architecture-review — last commit 2026-02-08, shares ai-assisted-development, java
  Analyze Java project architecture at macro level - package structure, module boundaries, dependency direction, and laye…
• decebals-claude-code-java-changelog-generator — last commit 2026-02-08, shares ai-assisted-development, java
  Generate changelogs from git commits. Use when user says "generate changelog", "update changelog", "what changed since…
• decebals-claude-code-java-clean-code — last commit 2026-02-08, shares ai-assisted-development, java
  Clean Code principles (DRY, KISS, YAGNI), naming conventions, function design, and refactoring. Use when user says "cle…
• decebals-claude-code-java-concurrency-review — last commit 2026-02-08, shares ai-assisted-development, java
  Review Java concurrency code for thread safety, race conditions, deadlocks, and modern patterns (Virtual Threads, Compl…
• decebals-claude-code-java-design-patterns — last commit 2026-02-08, shares ai-assisted-development, java
  Common design patterns with Java examples (Factory, Builder, Strategy, Observer, Decorator, etc.). Use when user asks "…
• decebals-claude-code-java-git-commit — last commit 2026-02-08, shares ai-assisted-development, java
  Generate conventional commit messages for Java projects. Use when user says "commit", "create commit", "commit changes"…
• decebals-claude-code-java-issue-triage — last commit 2026-02-08, shares ai-assisted-development, java
  Triage and categorize GitHub issues with priority labels. Use when user says "triage issues", "check issues", "review o…
• decebals-claude-code-java-java-code-review — last commit 2026-02-08, shares ai-assisted-development, java
  Systematic code review for Java with null safety, exception handling, concurrency, and performance checks. Use when use…
• decebals-claude-code-java-java-migration — last commit 2026-02-08, shares ai-assisted-development, java
  Guide for upgrading Java projects between major versions (8→11→17→21→25). Use when user says "upgrade Java", "migrate t…

These share tags the maintainers applied themselves, such as ai-assisted-development, java. Common tags like "mcp" or "ai" are ignored for this: agreeing with six hundred other projects is not a similarity.

This is not a recommendation and not a test result. It is a map of what the authors said their work is about.

Also from decebals

• decebals-claude-code-java-jpa-patterns — last commit 2026-02-08
  JPA/Hibernate patterns and common pitfalls (N+1, lazy loading, transactions, queries). Use when user has JPA performanc…
• decebals-claude-code-java-logging-patterns — last commit 2026-02-08
  Java logging best practices with SLF4J, structured logging (JSON), and MDC for request tracing. Includes AI-friendly lo…
• decebals-claude-code-java-maven-dependency-audit — last commit 2026-02-08
  Audit Maven dependencies for outdated versions, security vulnerabilities, and conflicts. Use when user says "check depe…
• decebals-claude-code-java-performance-smell-detection — last commit 2026-02-08
  Detect potential code-level performance smells in Java - streams, collections, boxing, regex, object creation. Provides…
• decebals-claude-code-java-solid-principles — last commit 2026-02-08
  SOLID principles checklist with Java examples. Use when reviewing classes, refactoring code, or when user asks about Si…
• decebals-claude-code-java-spring-boot-patterns — last commit 2026-02-08
  Spring Boot best practices and patterns. Use when creating controllers, services, repositories, or when user asks about…
• decebals-claude-code-java-test-quality — last commit 2026-02-08
  Write high-quality JUnit 5 tests with AssertJ assertions. Use when user says "add tests", "write tests", "improve test…

How the author describes it

Topics the maintainer set on GitHub: ai-assisted-development, claude-code, claude-code-skills, developer-tools, java.