Agent skill

304 Frameworks Spring Boot Security

A skill your agent uses when you need to design, review, or improve security in Spring Boot applications — including SecurityFilterChain, OAuth2/JWT resource server patterns, form login basics…

Apache-2.0Auto-check passedBackend & APIs

Install 304 Frameworks Spring Boot Security

skills CLI

$ npx skills add jabrena/plinth --skill 304-frameworks-spring-boot-security -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install jabrena/plinth 304-frameworks-spring-boot-security --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/jabrena/plinth.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/304-frameworks-spring-boot-security .claude/skills/304-frameworks-spring-boot-security && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "304-frameworks-spring-boot-security" agent skill from https://github.com/jabrena/plinth/tree/main/skills/304-frameworks-spring-boot-security into .claude/skills/304-frameworks-spring-boot-security/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "304-frameworks-spring-boot-security", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/jabrena/plinth/tree/main/skills/304-frameworks-spring-boot-security

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add jabrena/plinth --skill 304-frameworks-spring-boot-security -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install jabrena/plinth 304-frameworks-spring-boot-security --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/jabrena/plinth.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/304-frameworks-spring-boot-security .agents/skills/304-frameworks-spring-boot-security && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "304-frameworks-spring-boot-security" agent skill from https://github.com/jabrena/plinth/tree/main/skills/304-frameworks-spring-boot-security into .agents/skills/304-frameworks-spring-boot-security/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "304-frameworks-spring-boot-security", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add jabrena/plinth --skill 304-frameworks-spring-boot-security -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install jabrena/plinth 304-frameworks-spring-boot-security --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/jabrena/plinth.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/304-frameworks-spring-boot-security .cursor/skills/304-frameworks-spring-boot-security && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "304-frameworks-spring-boot-security" agent skill from https://github.com/jabrena/plinth/tree/main/skills/304-frameworks-spring-boot-security into .cursor/skills/304-frameworks-spring-boot-security/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "304-frameworks-spring-boot-security", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/jabrena/plinth.git --path skills/304-frameworks-spring-boot-security

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add jabrena/plinth --skill 304-frameworks-spring-boot-security -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install jabrena/plinth 304-frameworks-spring-boot-security --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/jabrena/plinth.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/304-frameworks-spring-boot-security .gemini/skills/304-frameworks-spring-boot-security && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "304-frameworks-spring-boot-security" agent skill from https://github.com/jabrena/plinth/tree/main/skills/304-frameworks-spring-boot-security into .gemini/skills/304-frameworks-spring-boot-security/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "304-frameworks-spring-boot-security", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install jabrena/plinth 304-frameworks-spring-boot-security

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add jabrena/plinth --skill 304-frameworks-spring-boot-security -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/jabrena/plinth.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/304-frameworks-spring-boot-security .github/skills/304-frameworks-spring-boot-security && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "304-frameworks-spring-boot-security" agent skill from https://github.com/jabrena/plinth/tree/main/skills/304-frameworks-spring-boot-security into .github/skills/304-frameworks-spring-boot-security/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "304-frameworks-spring-boot-security", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add jabrena/plinth --skill 304-frameworks-spring-boot-security -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install jabrena/plinth 304-frameworks-spring-boot-security --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/jabrena/plinth.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/304-frameworks-spring-boot-security .opencode/skills/304-frameworks-spring-boot-security && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "304-frameworks-spring-boot-security" agent skill from https://github.com/jabrena/plinth/tree/main/skills/304-frameworks-spring-boot-security into .opencode/skills/304-frameworks-spring-boot-security/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "304-frameworks-spring-boot-security", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: 304-frameworks-spring-boot-security
GitHub stars: 446
Token cost: ~719 tokens
SKILL.md length: 250 words
Files: 2 (incl. references)
Skills in repo: 124
Repo updated: Oct 7, 2026
First seen: Oct 7, 2026
Licence: Apache-2.0

At a glance

A skill your agent uses when you need to design, review, or improve security in Spring Boot applications — including SecurityFilterChain, OAuth2/JWT resource server patterns, form login basics…

You need to design
SKILL.md covers Constraints, When to use this skill, Workflow and Reference
Calls mvn
Improve security in Spring Boot applications — including SecurityFilterChain

What it does

304 Frameworks Spring Boot Security is an agent skill from jabrena/plinth. Use when you need to design, review, or improve security in Spring Boot applications — including SecurityFilterChain, OAuth2/JWT resource server patterns, form login basics, method security (@PreAuthorize), CSRF and CORS for APIs, session fixation, security headers, exception handling, password encoding, and sensitive-data-safe logging. This should trigger for requests such as Add Spring Boot security support; Review Spring Boot security configuration; Improve API authorization in Spring Boot; Add JWT resource…

Its SKILL.md is about 720 tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including reference files (for example `references/304-frameworks-spring-boot-security.md`).

It sits in Backend & APIs, covering Backend development, Authentication and Web application vulnerabilities. It works with Spring Boot. The repository describes itself as: Plinth is an AI-native engineering toolkit for modern Java enterprise SDLC, built around reusable Commands, Agents, Skills, and MCP Servers. The licence is Apache-2.0.

When your agent uses it

You need to design
Improve security in Spring Boot applications — including SecurityFilterChain
OAuth2/JWT resource server patterns
Form login basics

Example prompts

“/304-frameworks-spring-boot-security”

What it can do on your machine

Read from SKILL.md and the folder at commit dca88dc. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
- mvn
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

304 Frameworks Spring Boot Security loads about 719 tokens when it runs, and up to ~3.5k if it reads all its reference files. Until then it costs about 165 tokens; SKILL.md has 250 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~165
When it runs · the whole SKILL.md, loaded when a task matches: ~719
With references · SKILL.md plus every file in references/, read only if the agent opens them: ~3.5k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from jabrena/plinth at commit dca88dc, republished under its Apache-2.0 licence (© jabrena). 250 words, ~719 tokens.

Download SKILL.mdSave it as .claude/skills/304-frameworks-spring-boot-security/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.

name: 304-frameworks-spring-boot-security
description: Use when you need to design, review, or improve security in Spring Boot applications — including SecurityFilterChain, OAuth2/JWT resource server patterns, form login basics, method security (@PreAuthorize), CSRF and CORS for APIs, session fixation, security headers, exception handling, password encoding, and sensitive-data-safe logging. This should trigger for requests such as Add Spring Boot security support; Review Spring Boot security configuration; Improve API authorization in Spring Boot; Add JWT resource server security in Spring Boot; Harden Spring Boot security headers and CSRF settings. Part of Plinth Toolkit
license: Apache-2.0
metadata.author: Juan Antonio Breña Moral
metadata.version: 0.19.0

Spring Boot Security Guidelines

Apply Spring Boot security best practices with secure-by-default API boundaries.

What is covered in this Skill?

Spring Security configuration and SecurityFilterChain setup
Authentication and authorization policies for endpoints
Method-level security (@PreAuthorize / @Secured)
Principle of least privilege for roles and scopes
Secure error handling and denial responses
Sensitive data handling in logs and responses

Scope: Apply recommendations based on the reference rules and good/bad examples.

Constraints

Before applying security changes, ensure the project compiles. After improvements, run full verification.

MANDATORY: Run ./mvnw compile or mvn compile before applying any change
SAFETY: If compilation fails, stop immediately
VERIFY: Run ./mvnw clean verify or mvn clean verify after applying improvements
BEFORE APPLYING: Read the reference for detailed rules and examples

When to use this skill

Add Spring Boot security support
Review Spring Boot security configuration
Improve API authorization in Spring Boot
Add JWT resource server security in Spring Boot
Harden Spring Boot security headers and CSRF settings
Implement method security with @PreAuthorize in Spring Boot

Workflow

Read reference and assess project context

Read references/304-frameworks-spring-boot-security.md and inspect the current project setup before proposing changes.

Gather scope and decide target improvements

Identify requested outcomes, constraints, and the minimum safe set of changes to apply.

Apply framework-aligned changes

Implement or refactor security-related configuration/code following the reference patterns and project conventions.

Run verification and report results

Execute appropriate build/tests and summarize what changed, what was verified, and any follow-up actions.

Reference

For detailed guidance, examples, and constraints, see references/304-frameworks-spring-boot-security.md.

Files

SKILL.md and 1 other file (references) in skills/304-frameworks-spring-boot-security of jabrena/plinth.

SKILL.md
references/304-frameworks-spring-boot-security.md

Open the folder on GitHubat commit dca88dc

Compare with similar skills

304 Frameworks Spring Boot Security next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

304 Frameworks Spring Boot Security compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
304 Frameworks Spring Boot Security this skilljabrena/plinth	446	—	~719	Automated safety check: Pass	Apache-2.0	yesterday
Springboot Securityaffaan-m/ECC	275k	5 repos	~2k	Automated safety check: Pass	MIT	3 days ago
Spa Auth Developmentgdarko/laravel-vue-starter	145	—	~668	Automated safety check: Notes	MIT	6 mo ago
Oryxos Initoryx-labs/oryxos	186	—	~1.6k	Automated safety check: Pass	Apache-2.0	yesterday
Spring Boot Security JWTgiuseppe-trisciuoglio/developer-kit	355	—	~3.9k	Automated safety check: Notes	MIT	28 days ago
Java ArchitectJeffallan/claude-skills	12k	—	~1.5k	Automated safety check: Pass	MIT	5 days ago

Similar skills

Springboot Security
affaan-m/ECC
Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.
275k GitHub starsUsed in 5 repos~2k tokens
Backend & APIsAuto-check passed
Spa Auth Development
gdarko/laravel-vue-starter
Activate when working on SPA authentication flow, Sanctum cookie-based auth, Vue Router guards, auth store, login/register/password reset pages, or CORS/session configuration.
145 GitHub stars~668 tokensUpdated 6 mo ago
Backend & APIsAuto-check: notes
Oryxos Init
oryx-labs/oryxos
初始化 OryxOS（或同类 JDK 21 + Spring Boot 3.x 企业级单体）的工程地基：Maven 多模块骨架、结构化日志、Actuator + Prometheus 监控、Spring MVC + 虚拟线程、springdoc OpenAPI、统一响应体与全局异常/错误码、Google 格式 + 阿里编码规约（Spotless + 阿里 P3C +…
186 GitHub stars~1.6k tokensUpdated yesterday
Backend & APIsAuto-check passed
Spring Boot Security JWT
giuseppe-trisciuoglio/developer-kit
Provides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based…
355 GitHub stars~3.9k tokensUpdated 28 days ago
Backend & APIsAuto-check: notes
Java Architect
Jeffallan/claude-skills
Builds Spring Boot 3.x services on Java 21 with domain-driven design, WebFlux, JPA tuning and Spring Security using OAuth2 and JWT, verified by Maven or Gradle builds.
12k GitHub stars~1.5k tokensUpdated 5 days ago
Backend & APIsAuto-check passed
Spring Boot Engineer
Jeffallan/claude-skills
Builds Spring Boot 3.x services with REST controllers, Spring Data JPA, Spring Security 6, WebFlux and Spring Cloud, verified by tests and Actuator health checks.
12k GitHub stars~1.9k tokensUpdated 5 days ago
Backend & APIsAuto-check passed

More from jabrena/plinth

All 124 skills in this repo

703 Technologies Fuzzing Testing
jabrena/plinth
A skill your agent uses when you need to add or review fuzz testing for Java APIs with CATS — including contract-driven negative testing, malformed payload validation, boundary input exploration, CI…
446 GitHub stars~874 tokensUpdated yesterday
Auto-check passed
033 Architecture Diagrams
jabrena/plinth
A skill your agent uses when you need to generate Java project diagrams — including UML sequence diagrams, UML class diagrams, C4 model diagrams, UML state machine diagrams, UML Deployment Diagrams…
446 GitHub stars~3.1k tokensUpdated yesterday
Auto-check passed
112 Java Maven Plugins
jabrena/plinth
A skill your agent uses when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning…
446 GitHub stars~3.2k tokensUpdated yesterday
Auto-check passed
151 Java Performance Jmeter
jabrena/plinth
A skill your agent uses when you need to set up JMeter performance testing for a Java project — including creating the run-jmeter.sh script from the exact template, configuring load tests with…
446 GitHub stars~842 tokensUpdated yesterday
Auto-check passed
161 Java Profiling Detect
jabrena/plinth
A skill your agent uses when you need to set up Java application profiling to detect and measure performance issues — including trusted preinstalled async-profiler v4.x setup, problem-driven…
446 GitHub stars~903 tokensUpdated yesterday
Auto-check passed
001 Commands Inventory
jabrena/plinth
A skill your agent uses when you need to generate a checklist document with embedded commands inventory, following the embedded template exactly and producing INVENTORY-COMMANDS-JAVA.md in the…
446 GitHub stars~697 tokensUpdated yesterday
Auto-check passed

Works with

Spring Boot

Questions about 304 Frameworks Spring Boot Security

What does 304 Frameworks Spring Boot Security do?

A skill your agent uses when you need to design, review, or improve security in Spring Boot applications — including SecurityFilterChain, OAuth2/JWT resource server patterns, form login basics…. 304 Frameworks Spring Boot Security is an agent skill from jabrena/plinth. Use when you need to design, review, or improve security in Spring Boot applications — including SecurityFilterChain, OAuth2/JWT resource server patterns, form login basics, method security (@PreAuthorize), CSRF and CORS for APIs, session fixation, security headers, exception handling, password encoding, and sensitive-data-safe logging.

When should I use 304 Frameworks Spring Boot Security?

304 Frameworks Spring Boot Security fits situations like: you need to design; improve security in Spring Boot applications — including SecurityFilterChain; OAuth2/JWT resource server patterns; form login basics.

How do I install 304 Frameworks Spring Boot Security in Claude Code?

Run `npx skills add jabrena/plinth --skill 304-frameworks-spring-boot-security -a claude-code`. Or copy the skill folder (skills/304-frameworks-spring-boot-security in jabrena/plinth) into .claude/skills/304-frameworks-spring-boot-security in your project. Claude Code loads it when a task matches its description.

How do I install 304 Frameworks Spring Boot Security in Codex?

Run `npx skills add jabrena/plinth --skill 304-frameworks-spring-boot-security -a codex`. Or copy the skill folder (skills/304-frameworks-spring-boot-security in jabrena/plinth) into .agents/skills/304-frameworks-spring-boot-security in your project. Codex loads it when a task matches its description.

Can I use 304 Frameworks Spring Boot Security in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add jabrena/plinth --skill 304-frameworks-spring-boot-security -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/304-frameworks-spring-boot-security, .gemini/skills/304-frameworks-spring-boot-security, .github/skills/304-frameworks-spring-boot-security and .opencode/skills/304-frameworks-spring-boot-security in your project.

What does 304 Frameworks Spring Boot Security need to run?

Going by SKILL.md and its folder, 304 Frameworks Spring Boot Security needs the command-line tools its instructions call (mvn).

Does 304 Frameworks Spring Boot Security access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is 304 Frameworks Spring Boot Security safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does 304 Frameworks Spring Boot Security use?

304 Frameworks Spring Boot Security is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does 304 Frameworks Spring Boot Security use?

About 719 tokens (SKILL.md is roughly 2.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 2.8k tokens, read only when the agent opens those files.

What are the alternatives to 304 Frameworks Spring Boot Security?

Skills that share tags, products or a category with 304 Frameworks Spring Boot Security: Springboot Security (affaan-m/ECC, 275k stars), Spa Auth Development (gdarko/laravel-vue-starter, 145 stars), Oryxos Init (oryx-labs/oryxos, 186 stars) and Spring Boot Security JWT (giuseppe-trisciuoglio/developer-kit, 355 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains 304 Frameworks Spring Boot Security?

jabrena (a GitHub user) maintains it in jabrena/plinth, which has 446 GitHub stars. The repository holds 124 skills in this directory. The repository was last updated on October 7, 2026.

Source: jabrena/plinth on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install 304 Frameworks Spring Boot Security

Facts

At a glance

What it does

When your agent uses it

Example prompts

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Spring Boot Security Guidelines

Constraints

When to use this skill

Workflow

Reference

Files

Compare with similar skills

Similar skills

More from jabrena/plinth

Related

Questions about 304 Frameworks Spring Boot Security