affaan-m/ECC

springboot-verification

Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.

59CollectingRuns scripts
See how to use itView GitHub source
npx skills add https://github.com/affaan-m/ECC --skill "docs/ja-JP/skills/springboot-verification"
Automated source guide

Source checked Jul 28, 2026·Refresh due Oct 26, 2026

Reorganized from the pinned upstream SKILL.md

Turn springboot-verification's source instructions into a guide you can follow

According to the pinned SKILL.md from affaan-m/ECC: Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.

npx skills add https://github.com/affaan-m/ECC --skill "docs/ja-JP/skills/springboot-verification"
Check the pinned source

Best fit

  • Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.

Bring this context

  • A concrete task that matches the documented purpose of springboot-verification.
  • The files, examples, or context the task depends on.
  • Your constraints, target environment, and definition of done.

Expected outputs

  • A result that follows the pinned springboot-verification instructions.
  • A concise record of assumptions, inputs used, and unresolved questions.
  • A final check against the source workflow and relevant permission signals.

Key source sections

Read springboot-verification through these 5 source sections

Sections are extracted automatically from the pinned SKILL.md and link back to the source.

02

または

./gradlew clean assemble -x test bash mvn -T 4 spotbugs:check pmd:check checkstyle:check bash ./gradlew checkstyleMain pmdMain spotbugsMain bash mvn -T 4 test mvn jacoco:report 80%以上のカバレッジを確認

SKILL.md · または
./gradlew clean assemble -x test bash mvn -T 4 spotbugs:check pmd:check checkstyle:check bash ./gradlew checkstyleMain pmdMain spotbugsMain bash mvn -T 4 test mvn jacoco:report 80%以上のカバレッジを確認
03

フェーズ2: 静的解析

Review the “フェーズ2: 静的解析” section in the pinned source before continuing.

SKILL.md · フェーズ2: 静的解析
Review and apply the “フェーズ2: 静的解析” source section.
05

フェーズ4: セキュリティスキャン

Review the “フェーズ4: セキュリティスキャン” section in the pinned source before continuing.

SKILL.md · フェーズ4: セキュリティスキャン
Review and apply the “フェーズ4: セキュリティスキャン” source section.

SkillSignal prompt templates

Provide the task, context, and acceptance criteria

These prompts were written by SkillSignal from the source structure; they are not upstream text.

Task-start prompt

Confirm source fit, inputs, and outputs before acting.

Use springboot-verification to help me with: [specific task]. Context: [files, data, or background]. Constraints: [environment, scope, and prohibited actions]. Before acting, check the pinned SKILL.md and explain which sections apply, what inputs are still missing, and what you will deliver.

Source-guided execution

Make the Agent explicitly follow the key extracted sections.

Apply the pinned springboot-verification source to [task]. Pay particular attention to these source sections: “フェーズ1: ビルド”, “または”, “フェーズ2: 静的解析”, “フェーズ3: テスト + カバレッジ”, “フェーズ4: セキュリティスキャン”. Preserve the important decision at each step. Mark facts not covered by the source as “needs confirmation” instead of inventing them. Then verify the result against my acceptance criteria: [criteria].

Result-review prompt

Check omissions, permissions, and source drift before delivery.

Review the current springboot-verification result: (1) does it satisfy the original task; (2) were any applicable steps or limits in the pinned SKILL.md missed; (3) did it perform any unauthorized file, command, network, or data action; and (4) which conclusions remain unverified? List issues first, then fix only what the source or user authorization supports.

Output checklist

Verify each item before delivery

The task matches the purpose documented in the SKILL.md.

The source section “フェーズ1: ビルド” has been checked.

The source section “または” has been checked.

The source section “フェーズ2: 静的解析” has been checked.

The source section “フェーズ3: テスト + カバレッジ” has been checked.

Inputs, constraints, and acceptance criteria are explicit.

Unverified facts, compatibility, and outcome claims are clearly marked.

Any file, command, network, or data action has been reviewed.

Choose a different workflow

When another Skill is the better fit

FAQ

What does springboot-verification do?

Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.

How do I start using springboot-verification?

The catalog detected this source-specific install command: npx skills add https://github.com/affaan-m/ECC --skill "docs/ja-JP/skills/springboot-verification". Inspect the command and pinned source before running it.

Which Agent platforms does it declare?

No dedicated Agent platform is declared in the pinned source record.

Repository stars
234,327
Repository forks
35,711
Quality
59/100
Source repository last pushed

Quality breakdown

Based on traceable docs and repository signals; stars are not treated as quality.

59/100
Documentation18/30
Specificity13/25
Maintenance18/20
Trust signals10/25

Compare before choosing

Related Agent Skills and source variants

These links are selected from shared tasks, functions, stacks, platforms, and same-name variants. Compare the source owner, documentation, permissions, and maintenance signals.

springboot-verification by affaan-m

Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.

springboot-verification by affaan-m

Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.

geofeed-tuner by github

Use this skill whenever the user mentions IP geolocation feeds, RFC 8805, geofeeds, or wants help creating, tuning, validating, or publishing a self-published IP geolocation feed in CSV format. Intended user audience is a network operator, ISP, mobile carrier, cloud provider, hosting company, IXP, or satellite provider asking about IP geolocation accuracy, or geofeed authoring best practices. Helps create, refine, and improve CSV-format IP geolocation feeds with opinionated recommendations beyon

simpy by k-dense-ai

Build, inspect, test, and analyze bounded process-based discrete-event simulations with SimPy, including events, resources, interrupts, monitoring, replications, warm-up, and reproducible output analysis.

mcp-implementation-security-review by github

Review the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions, rate limiting, input-schema validation, official-SDK usage, RCE vectors, and the OWASP MCP Top 10 — producing a report with file/line evidence. Use this skill when: - Reviewing an MCP server implementation for security before release - Checking a server against the baseline controls (MCP-01 to MCP-05) and the OWASP MCP Top 10 - Auditing

View original Skill.mdThis page is parsed directly from the repository SKILL.md without editorial rewriting. Collected: Jul 28, 2026 · about 1 min

Spring Boot 検証ループ

PR前、大きな変更後、デプロイ前に実行します。

フェーズ1: ビルド

mvn -T 4 clean verify -DskipTests
# または
./gradlew clean assemble -x test

ビルドが失敗した場合は、停止して修正します。

フェーズ2: 静的解析

Maven(一般的なプラグイン):

mvn -T 4 spotbugs:check pmd:check checkstyle:check

Gradle(設定されている場合):

./gradlew checkstyleMain pmdMain spotbugsMain

フェーズ3: テスト + カバレッジ

mvn -T 4 test
mvn jacoco:report   # 80%以上のカバレッジを確認
# または
./gradlew test jacocoTestReport

レポート:

  • 総テスト数、合格/失敗
  • カバレッジ%(行/分岐)

フェーズ4: セキュリティスキャン

# 依存関係のCVE
mvn org.owasp:dependency-check-maven:check
# または
./gradlew dependencyCheckAnalyze

# シークレット(git)
git secrets --scan  # 設定されている場合

フェーズ5: Lint/Format(オプションゲート)

mvn spotless:apply   # Spotlessプラグインを使用している場合
./gradlew spotlessApply

フェーズ6: 差分レビュー

git diff --stat
git diff

チェックリスト:

  • デバッグログが残っていない(System.out、ガードなしの log.debug
  • 意味のあるエラーとHTTPステータス
  • 必要な場所にトランザクションと検証がある
  • 設定変更が文書化されている

出力テンプレート

検証レポート
===================
ビルド:     [合格/不合格]
静的解析:   [合格/不合格] (spotbugs/pmd/checkstyle)
テスト:     [合格/不合格] (X/Y 合格, Z% カバレッジ)
セキュリティ: [合格/不合格] (CVE発見: N)
差分:       [X ファイル変更]

全体:       [準備完了 / 未完了]

修正が必要な問題:
1. ...
2. ...

継続モード

  • 大きな変更があった場合、または長いセッションで30〜60分ごとにフェーズを再実行
  • 短いループを維持: mvn -T 4 test + spotbugs で迅速なフィードバック

注意: 迅速なフィードバックは遅い驚きに勝ります。ゲートを厳格に保ち、本番システムでは警告を欠陥として扱います。

Source repo
affaan-m/ECC
Skill path
docs/ja-JP/skills/springboot-verification/SKILL.md
Commit SHA
4e973d3eaf92
Repository license
MIT
Data collected