spring-kotlin-code-review

Analyze Kotlin and Spring changes for behavioral and operational risks.

14|1|Updated Mar 6, 2026
One-click install
npx skills add https://github.com/Kotlin/kotlin-backend-agent-skills --skill spring-kotlin-code-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spring-kotlin-code-review
Source: https://github.com/Kotlin/kotlin-backend-agent-skills/tree/main/.agents/skills/spring-kotlin-code-review
Command: npx skills add https://github.com/Kotlin/kotlin-backend-agent-skills --skill spring-kotlin-code-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Review Kotlin + Spring changes for behavioral regressions, transaction and proxy bugs, API and serialization mistakes, persistence risks, security issues, configuration drift, and missing tests. Use when reviewing a PR, diff, patch, or design change where generic style-focused review would miss Spring-specific correctness and operational risks.

Core Features & Use Cases

  • Structured risk-focused review of PRs, diffs, patches, or design changes.
  • Assess transaction boundaries, proxy self-invocation, and bean wiring for correctness.
  • Evaluate API contracts, serialization integrity, persistence risks, security exposure, and test adequacy.
  • Provide actionable findings and remediation guidance.

Quick Start

Review the latest PR diff with this skill enabled and generate a prioritized risk findings report.

Frequently Asked Questions about spring-kotlin-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a Spring Kotlin PR for transaction and proxy bugs?

Assess transaction boundaries and proxy self-invocation risks in Spring Kotlin code by analyzing PR diffs to detect behavioral regressions and bean wiring issues. This review provides concise, structured findings ordered by severity with concrete file references and suggested mitigations.

What is the best way to check Kotlin Spring changes for security exposure and persistence risks?

Check Kotlin Spring changes for security exposure and persistence risks by evaluating API contracts, serialization integrity, and data access layers within the submitted patch. The analysis flags configuration drift, security vulnerabilities, and operational risks while providing actionable remediation guidance for each identified issue.

How do I find missing tests in a Spring Kotlin code review?

Identify missing tests in a Spring Kotlin code review by analyzing the PR diff to flag testing gaps across controllers, services, repositories, and configurations. The review evaluates test adequacy and highlights untested behavioral paths to prevent regressions from reaching production.

Can I use an automated risk assessor for Spring Boot API serialization correctness?

Yes, you can assess Spring Boot API serialization correctness by evaluating API contracts and serialization integrity within submitted code changes. The review identifies serialization mistakes and API contract violations, delivering concise findings ordered by severity with concrete file references.

Why does my Kotlin Spring code review miss configuration drift and operational risks?

Generic code reviews miss configuration drift and operational risks because they lack Spring-specific correctness checks for bean wiring, proxy behavior, and transaction boundaries. A dedicated risk assessor evaluates configurations and migrations to detect operational risks that style-focused reviews overlook.

What types of files and changes does a Spring Kotlin risk assessment cover?

A Spring Kotlin risk assessment covers controllers, services, repositories, configurations, and migrations within a PR, diff, patch, or design change. It evaluates transaction boundaries, API contracts, persistence risks, security exposure, and test adequacy across these components to provide structured findings.