Spring Boot Engineer

Use when building Spring Boot 3.x applications, microservices, or reactive Java applications. Invoke for Spring Data JPA, Spring Security 6, WebFlux, Spring Cloud integration.

This skill is coherent and appears to be a template/reference guide for Spring Boot development. It does not request credentials or perform installs, but it contains example configuration placeholders and several permissive example settings (e.g., wildcard CORS, actuator details, example config server credentials). Before using produced code in production: (1) replace placeholders with secrets stored in a secure vault, not in properties files; (2) avoid wildcard CORS in production and lock down actuator endpoints; (3) review gateway and config-server defaults for exposed endpoints and credentials; (4) run an internal code review and security scan on generated configurations and dependencies. If you need stronger assurance, ask the skill author for provenance (homepage/source) or request an explicit list of required env vars for any generated deployment manifests.

Type: OpenClaw Skill Name: spring-boot-engineer Version: 0.1.0 The skill bundle is benign. The SKILL.md instructions guide the AI agent to act as a Spring Boot engineer, explicitly warning against storing secrets or hardcoding credentials. All referenced files provide code examples for standard Spring Boot development, including secure handling of configuration (e.g., using environment variables for secrets like `GIT_USERNAME`, `jwt.secret`), and common practices like using Testcontainers for database testing. There is no evidence of intentional harmful behavior, data exfiltration, malicious execution, or prompt injection attempts with a harmful objective.