spring-boot-reviewer

Analyze Spring Boot code for DI, transaction, REST, security, and JPA issues.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/physics91/claude-vibe --skill spring-boot-reviewer
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spring-boot-reviewer
Source: https://github.com/physics91/claude-vibe/tree/main/skills/spring-boot-reviewer
Command: npx skills add https://github.com/physics91/claude-vibe --skill spring-boot-reviewer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill reviews Spring Boot applications for dependency injection patterns, transaction management, REST API design, security config, and JPA best practices.

Core Features & Use Cases

  • DI patterns: flags field injection and promotes constructor injection.
  • Transaction management: highlights @Transactional usage patterns.
  • REST API design: ensures clean API boundaries and DTO usage.
  • Security config: reviews security setup and CSRF controls.
  • Use Case: Convert a service from field injection to constructor injection with @RequiredArgsConstructor.

Quick Start

Run the spring-boot-reviewer on a Spring project to surface DI, transaction, and API design improvements.

Frequently Asked Questions about spring-boot-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Spring Boot dependency injection patterns in my application?

Dependency injection auditing evaluates whether your Spring Boot services use constructor injection instead of field injection, improving testability and immutability. This Skill analyzes @Autowired usage and promotes constructor-based patterns with @RequiredArgsConstructor to surface anti-patterns and provide remediation guidance.

What Spring Boot security misconfigurations should I check for?

Spring Boot security review identifies missing security annotations, improper CSRF and actuator exposure, and weak security policies. This Skill scans your security configuration to surface exposure risks and provide actionable recommendations for hardening REST endpoints and protecting sensitive endpoints.

How do I detect N+1 query problems and JPA best practice violations?

JPA analysis identifies N+1 query patterns and improper entity relationship loading that degrades database performance. This Skill reviews transaction boundaries and JPA usage to flag inefficient queries and recommend eager loading or query optimization strategies.

Can I review REST API design quality for controller-layer violations?

REST API design review ensures clean boundaries between controllers and services, validates DTO usage, and identifies controller-layer violations. This Skill analyzes your Spring Boot endpoints to surface architectural anti-patterns and guide proper separation of concerns.

What @Transactional usage patterns should I verify in my Spring Boot services?

Transaction management review highlights @Transactional annotation patterns and boundaries in your services. This Skill evaluates whether transaction demarcation follows best practices and provides recommendations for proper transaction scope and propagation behavior.

Does this Skill work with Spring Boot projects that use spring-boot-starter dependencies?

Yes, this Skill targets Spring Boot projects with spring-boot-starter-* dependencies and an @SpringBootApplication class. It analyzes DI, transaction, REST, security, and JPA patterns to deliver prioritized recommendations applicable to standard Spring Boot project structures.