security-antipatterns-java

Review Java web application code for OWASP Top 10 security vulnerabilities.

1|1|Updated Jan 20, 2026

Search Tags:#security #owasp #java #best-practices #code-generation #secure-code

Ready to run

npx skills add https://github.com/subhashdasyam/security-antipatterns-java --skill security-antipatterns-java

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-antipatterns-java
Source: https://github.com/subhashdasyam/security-antipatterns-java/tree/main
Command: npx skills add https://github.com/subhashdasyam/security-antipatterns-java --skill security-antipatterns-java

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

AI-generated Java code for web apps often contains security vulnerabilities; this skill provides guardrails to prevent OWASP Top 10 issues during code generation and review.

Core Features & Use Cases

Provides a structured set of security modules (injection, deserialization, XSS, access control, secrets, validation, file ops, and framework-specific patterns) with BAD/GOOD examples.
Serves as a codec guard during code generation for Spring Boot, Jakarta EE, and core Java, and as a reference during code reviews to enforce secure patterns.
Includes references and best-practice guidance to support developers in designing secure software.

Quick Start

Generate Java code with the guard enabled to ensure security best practices are applied to the generated web application code.

Frequently Asked Questions about security-antipatterns-java

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I prevent OWASP vulnerabilities in AI-generated Java code?▼

Prevent OWASP vulnerabilities in AI-generated Java code by applying structured security guardrails during code generation and review, using fixed BAD/GOOD examples to enforce secure patterns across Spring Boot, Jakarta EE, and core Java components.

What security anti-patterns should I check for in Spring Boot and Jakarta EE applications?▼

Check Spring Boot and Jakarta EE applications for security anti-patterns across injection, deserialization, XSS, access control, secrets management, validation, file operations, and framework-specific security configuration using structured reference modules.

Can I use this to review existing Java web applications for insecure authentication and JDBC patterns?▼

Yes, you can review existing Java web applications for insecure authentication and JDBC patterns by using the provided security reference documents and best-practice examples to identify and enforce secure coding configurations during code reviews.

What's the best way to secure Java code generation against common web application security risks?▼

Secure Java code generation against web application security risks by enabling a codec guard that applies a fixed module set of BAD/GOOD examples, preempting OWASP Top 10 issues during the AI code generation process for web apps.

Does this cover insecure deserialization and XSS prevention in core Java components?▼

Yes, this covers insecure deserialization and XSS prevention in core Java components by applying structured security modules with BAD/GOOD examples that guide secure generation and review across serialization, validation, and output encoding.

Why does AI-generated Java code often contain security vulnerabilities and how do I fix them?▼

AI-generated Java code often contains security vulnerabilities because AI coding agents lack built-in secure coding guardrails; fix them by enforcing a fixed set of security modules with BAD/GOOD examples during generation and review to preempt OWASP Top 10 issues.