skills / benchflow-ai / skillsbench / tasks-fix-druid-loophole-cve-environment-skills-senior-java tasks-fix-druid-loophole-cve-environment-skills-senior-java Summary This source did not publish a separate summary. Review SKILL.md before using the skill.
Senior Java
World-class Java and Spring Boot development skill for enterprise applications, microservices, and cloud-native systems. Expertise in Spring Framework, Spring Boot 3.x, Spring Cloud, JPA/Hibernate, and reactive programming with WebFlux.
Overview
This skill provides production-ready Java and Spring Boot development capabilities through six Python automation tools and comprehensive reference documentation. Whether building enterprise monoliths, microservices architectures, or reactive systems, this skill ensures best practices, scalable architecture, and enterprise-grade security.
What This Skill Provides:
Spring Boot project scaffolding with layered architecture
JPA entity and repository generation with optimized queries
RESTful API endpoint scaffolding with proper error handling
Spring Security configuration (OAuth2, JWT, RBAC)
Dependency analysis and upgrade recommendations
JVM performance profiling and optimization guidance
Use this skill when:
Starting new Spring Boot projects or microservices
Implementing JPA/Hibernate data layers
Designing RESTful APIs with Spring MVC or WebFlux
Setting up authentication and authorization
Optimizing JVM and application performance
Reviewing Java code for quality and patterns
Core Value: Save 60%+ time on project scaffolding while ensuring enterprise-grade architecture, security compliance, and performance optimization.
Core Capabilities
Spring Boot Scaffolding - Generate production-ready Spring Boot 3.x projects with layered architecture, Docker configuration, and CI/CD pipelinesEntity Generation - Create JPA entities with repositories, services, controllers, DTOs, and mappers following DDD patternsAPI Development - Scaffold RESTful endpoints with validation, error handling, pagination, and OpenAPI documentation
Security Implementation - Configure Spring Security with OAuth2, JWT, role-based access control, and security best practices
Dependency Management - Analyze dependencies for vulnerabilities, outdated versions, and upgrade paths
Performance Optimization - Profile JVM applications, identify bottlenecks, and generate optimization recommendations
Quick Start
Create Spring Boot Project # Create microservice with PostgreSQL
python scripts/spring_project_scaffolder.py order-service --type microservice --db postgresql
# Create monolith with MySQL and security
python scripts/spring_project_scaffolder.py ecommerce-app --type monolith --db mysql --security oauth2
# Create reactive WebFlux service
python scripts/spring_project_scaffolder.py notification-service --type reactive --db mongodb
Generate JPA Entity # Generate complete entity stack (entity, repository, service, controller, DTO)
python scripts/entity_generator.py Product --fields "id:Long,name:String,price:BigDecimal,category:String,createdAt:LocalDateTime"
# Generate with relationships
python scripts/entity_generator.py Order --fields "id:Long,customer:Customer,items:List<OrderItem>,total:BigDecimal" --relations "customer:ManyToOne,items:OneToMany"
Analyze Dependencies # Check for vulnerabilities and updates
python scripts/dependency_analyzer.py pom.xml --check-security
# Generate upgrade report
python scripts/dependency_analyzer.py build.gradle --output report.md
Access Documentation
Spring Boot patterns: references/spring-boot-best-practices.md
Microservices design: references/microservices-patterns.md
JPA/Hibernate guide: references/jpa-hibernate-guide.md
Security reference: references/spring-security-reference.md
Performance tuning: references/java-performance-tuning.md
Key Workflows
1. New Spring Boot Microservice
Scaffold Project - Generate microservice with Spring Boot 3.x, Docker, and CI/CD
python scripts/spring_project_scaffolder.py inventory-service --type microservice --db postgresql --security jwt
Configure Environment - Set up application.yml with profiles (dev, staging, prod)
cd inventory-service
# Edit src/main/resources/application.yml
# Configure database, security, and service discovery
Generate Entities - Create domain model with JPA entities
python scripts/entity_generator.py Inventory --fields "id:Long,productId:Long,quantity:Integer,warehouse:String"
python scripts/entity_generator.py InventoryMovement --fields "id:Long,inventory:Inventory,quantity:Integer,type:MovementType,timestamp:LocalDateTime"
Implement Business Logic - Add service layer logic and validation rules
Add Tests - Generate unit and integration tests
# Run tests
./mvnw test
./mvnw verify # Integration tests
Build and Deploy
./mvnw clean package -DskipTests
docker build -t inventory-service:latest .
2. REST API Development Time: 20-30 minutes per endpoint group
Design API Contract - Define endpoints following REST conventions
python scripts/api_endpoint_generator.py products --methods GET,POST,PUT,DELETE --paginated
Implement Validation - Add Jakarta validation annotations and custom validators
Configure Error Handling - Set up global exception handler with problem details (RFC 7807)
Add OpenAPI Documentation - Configure SpringDoc for automatic API docs
Test Endpoints - Generate integration tests with MockMvc or WebTestClient
3. JPA/Hibernate Optimization Time: 1-2 hours for complex data models
Analyze Current Queries - Profile repository methods for N+1 problems
python scripts/performance_profiler.py --analyze-queries src/
Optimize Fetch Strategies - Configure lazy/eager loading appropriately
Add Query Hints - Implement entity graphs and query hints for complex queries
Configure Caching - Set up Hibernate second-level cache with Hazelcast or Redis
Implement Pagination - Use Spring Data's Slice or Page for large datasets
4. Spring Security Implementation
Generate Security Config - Create security configuration for chosen auth method
python scripts/security_config_generator.py --type jwt --roles ADMIN,USER,MANAGER
Configure OAuth2/JWT - Set up token generation, validation, and refresh
Implement RBAC - Add role-based access control to endpoints
Add Method Security - Configure @PreAuthorize and @PostAuthorize annotations
Test Security - Generate security integration tests
Python Tools
spring_project_scaffolder.py Generate production-ready Spring Boot project structures with complete configuration.
Spring Boot 3.x with Java 17/21 support
Multiple project types (microservice, monolith, reactive)
Database configuration (PostgreSQL, MySQL, MongoDB, H2)
Docker and Docker Compose setup
GitHub Actions CI/CD pipeline
Layered architecture (controller, service, repository)
Lombok and MapStruct integration
# Microservice with PostgreSQL and JWT security
python scripts/spring_project_scaffolder.py user-service --type microservice --db postgresql --security jwt
# Monolith with MySQL and OAuth2
python scripts/spring_project_scaffolder.py ecommerce --type monolith --db mysql --security oauth2
# Reactive service with MongoDB
python scripts/spring_project_scaffolder.py notification-service --type reactive --db mongodb
# Help
python scripts/spring_project_scaffolder.py --help
entity_generator.py Generate complete JPA entity stacks with repository, service, controller, and DTO.
JPA entity with Lombok annotations
Spring Data JPA repository with custom queries
Service layer with transaction management
REST controller with validation
DTO and mapper (MapStruct)
Relationship support (OneToMany, ManyToOne, ManyToMany)
# Basic entity
python scripts/entity_generator.py Customer --fields "id:Long,name:String,email:String"
# Entity with relationships
python scripts/entity_generator.py Order --fields "id:Long,customer:Customer,total:BigDecimal" --relations "customer:ManyToOne"
# Entity with audit fields
python scripts/entity_generator.py Product --fields "id:Long,name:String,price:BigDecimal" --auditable
# Help
python scripts/entity_generator.py --help
api_endpoint_generator.py Scaffold RESTful API endpoints with validation and documentation.
CRUD endpoint generation
Request/response DTOs
Jakarta validation annotations
OpenAPI annotations
Pagination support
Error handling
# Full CRUD endpoints
python scripts/api_endpoint_generator.py orders --methods GET,POST,PUT,DELETE
# Read-only with pagination
python scripts/api_endpoint_generator.py reports --methods GET --paginated
# Help
python scripts/api_endpoint_generator.py --help
security_config_generator.py Generate Spring Security configuration for various authentication methods.
JWT authentication setup
OAuth2 resource server configuration
Role-based access control
Method security configuration
CORS and CSRF configuration
Security filter chain
# JWT security with roles
python scripts/security_config_generator.py --type jwt --roles ADMIN,USER
# OAuth2 resource server
python scripts/security_config_generator.py --type oauth2 --issuer-uri https://auth.example.com
# Help
python scripts/security_config_generator.py --help
dependency_analyzer.py Analyze Maven/Gradle dependencies for vulnerabilities and updates.
Security vulnerability scanning
Outdated dependency detection
Upgrade path recommendations
Dependency tree analysis
License compliance checking
# Analyze Maven project
python scripts/dependency_analyzer.py pom.xml
# Analyze Gradle with security focus
python scripts/dependency_analyzer.py build.gradle --check-security
# Generate markdown report
python scripts/dependency_analyzer.py pom.xml --output report.md
# Help
python scripts/dependency_analyzer.py --help
performance_profiler.py Profile JVM applications and generate optimization recommendations.
Query analysis for N+1 detection
Memory usage patterns
GC behavior analysis
Thread pool recommendations
Connection pool optimization
JVM flag recommendations
# Analyze source for performance issues
python scripts/performance_profiler.py --analyze-queries src/
# Profile running application
python scripts/performance_profiler.py --profile http://localhost:8080/actuator
# Generate optimization report
python scripts/performance_profiler.py src/ --output performance-report.md
# Help
python scripts/performance_profiler.py --help
Reference Documentation
When to Use Each Reference
Project structure and layered architecture
Configuration management with profiles
API design and error handling
Testing strategies (unit, integration, contract)
Production readiness (actuator, monitoring)
Service decomposition strategies
Spring Cloud components (Config, Gateway, Discovery)
Inter-service communication (REST, gRPC, messaging)
Distributed tracing and observability
Circuit breaker and resilience patterns
Entity design and mapping strategies
Repository patterns and custom queries
Fetch optimization and N+1 prevention
Caching strategies (first-level, second-level)
Transaction management
Authentication methods (JWT, OAuth2, SAML)
Authorization patterns (RBAC, ABAC)
Security filter chain configuration
Method security annotations
Security testing
JVM tuning and GC optimization
Connection pool configuration
Caching strategies
Async processing and virtual threads
Profiling and monitoring tools
Best Practices
Quality Standards
Code Coverage: Target 80%+ for business logic, 60%+ overallAPI Documentation: 100% endpoint coverage with OpenAPISecurity Scanning: Zero critical/high vulnerabilitiesPerformance: P99 latency < 200ms for CRUD operations
Common Pitfalls to Avoid
N+1 Queries - Always use entity graphs or fetch joins for relationshipsMissing Transactions - Ensure @Transactional on service methods modifying dataBlocking in WebFlux - Never use blocking calls in reactive pipelinesHardcoded Configuration - Use externalized configuration with profilesMissing Validation - Always validate input at controller layerOpen Sessions in View - Disable OSIV anti-pattern in production
Performance Metrics
Project scaffolding time (target: < 30 minutes)
Entity stack generation (target: < 5 minutes per entity)
Security setup time (target: < 1 hour)
Test coverage (target: 80%+)
Static analysis issues (target: 0 critical/high)
Documentation coverage (target: 100% public APIs)
P99 latency (target: < 200ms)
Throughput (target: > 1000 RPS per instance)
Memory efficiency (target: < 512MB heap for typical service)
Integration This skill works best with:
senior-backend - For general API patterns and database designsenior-architect - For system design and microservices architecture decisionssenior-devops - For CI/CD pipeline and Kubernetes deploymentsenior-security - For security audits and penetration testing
Composability & Integration
Skill Composition Patterns This skill receives input from:
senior-architect - Architecture decisions inform project scaffolding choicesbusiness-analyst-toolkit - Requirements define entity models and API contractsproduct-manager-toolkit - User stories guide feature implementation This skill provides output to:
senior-devops - Generated projects include Dockerfile and CI/CD configurationsenior-qa - Generated code includes test scaffolding for QA automationtechnical-writer - OpenAPI specs feed API documentation generation
Recommended Skill Combinations Workflow Pattern 1: Microservices Development
senior-architect → senior-java → senior-devops
Use this pattern for designing and deploying microservices with proper architecture review.
Workflow Pattern 2: Full-Stack Feature
senior-java → senior-frontend → senior-qa
Use this pattern for end-to-end feature implementation with backend API, frontend UI, and testing.
Benefits
60% faster project scaffolding vs. manual setup
50% reduction in boilerplate code through generation
40% faster security implementation with templates
Consistent architecture across projects
Built-in security best practices
Comprehensive test coverage templates
Faster time-to-market for new services
Reduced technical debt through standardization
Lower maintenance costs through consistency
Next Steps
Run python scripts/spring_project_scaffolder.py my-service --type microservice --db postgresql to create your first project
Review generated structure and customize configuration
Generate entities with python scripts/entity_generator.py
Configure Spring Cloud for service discovery
Implement reactive patterns with WebFlux
Set up distributed tracing with Micrometer
Additional Resources
Documentation: Full skill guide and workflows available in this file
Support: For issues or questions, refer to domain guide at ../CLAUDE.md
Version: 1.0.0 | Last Updated: 2025-12-16 | Status: Production Ready
