spring-kotlin-code-review

Analyze Kotlin and Spring code for transactional and security risks.

4|Updated Jun 10, 2026
One-click install
npx skills add https://github.com/mymx2/foreman --skill spring-kotlin-code-review-mymx2
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spring-kotlin-code-review
Source: https://github.com/mymx2/foreman/tree/main/.qoder/skills.collected/skills/spring-kotlin-code-review
Command: npx skills add https://github.com/mymx2/foreman --skill spring-kotlin-code-review-mymx2

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the gap between generic code linting and deep architectural understanding, identifying critical Spring-specific risks like transactional bugs, proxy issues, and security vulnerabilities that standard reviews often overlook.

Core Features & Use Cases

  • Behavioral Risk Analysis: Detects issues with transaction boundaries, bean wiring, and self-invocation traps in Spring proxies.
  • Operational Safety: Flags potential regressions in observability, concurrency, and backward compatibility for APIs and database schemas.
  • Use Case: Use this during a pull request review for a complex service layer change to ensure that new asynchronous paths or repository queries do not introduce N+1 performance issues or security authorization drift.

Quick Start

Invoke the spring-kotlin-code-review skill to analyze the current pull request for behavioral, transactional, and security risks.

Frequently Asked Questions about spring-kotlin-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a Spring pull request for transactional bugs and proxy issues?

To review a Spring pull request for transactional bugs and proxy issues, analyze service and repository layers for self-invocation traps and bean wiring misconfigurations. This process identifies transaction boundary violations and behavioral regressions before deployment.

What is the best way to detect N+1 query problems in Kotlin Spring repositories?

The best way to detect N+1 query problems in Kotlin Spring repositories is to inspect repository queries and asynchronous paths during pull request analysis. Deep inspection of persistence layers flags performance regressions introduced by new service layer changes.

Can I use a standard linter to find Spring security vulnerabilities and authorization drift?

Standard linters cannot find Spring security vulnerabilities and authorization drift because they lack deep architectural understanding. You need dedicated PR analysis that inspects controller layers to identify security vulnerabilities and ensure production-grade reliability.

How does Spring proxy self-invocation affect transactional integrity?

Spring proxy self-invocation affects transactional integrity by bypassing the proxy layer, which breaks transaction boundaries. Analyzing service layer code for internal method calls identifies these behavioral risks and prevents unexpected commit or rollback failures.

Does Spring code review cover backward compatibility for APIs and database schemas?

Spring code review covers backward compatibility for APIs and database schemas by flagging potential regressions in operational safety. Analyzing design changes ensures new repository queries and controller endpoints maintain compatibility and observability.

When should I perform a deep architectural review instead of a generic code linting check?

You should perform a deep architectural review instead of generic code linting when evaluating complex service layer changes in Spring applications. Deep inspection is required to identify critical risks like transactional bugs, proxy issues, and concurrency vulnerabilities.