claude-code-java

Skills for Java projects: code review, Spring Boot, JPA, concurrency, Java version migration, Maven audits and security

SkillLow risk

decebals/claude-code-java

Install

npx skills@latest add decebals/claude-code-java

--global for a user-level install, --skill to pick skills.

This is third-party code. Review the repository files before installing.

What it does

Eighteen skills are grouped into workflow (commits, changelogs, issue triage), code quality (Java review, REST API contracts, thread safety, performance smells, tests, Maven dependencies, OWASP audits), architecture (package structure review, SOLID, patterns, clean code) and frameworks (Spring Boot, JPA, logging, Java version migration). The author tests that the agent picks the right skill from its description: eval-routing.sh runs a prompt set and reports misroutes. Beyond skills, the repository has a project setup script that generates CLAUDE.md, MCP configuration and Claude Code settings.

Who it is for. For Java developers on Maven or Gradle who work with Claude Code or another skills-aware agent.

Good fit when

  • You need a checklist review of a pull request in a Java project
  • You need to track down N+1 or LazyInitializationException in JPA
  • You plan to move from Java 8 or 11 to Java 21

Not a fit when

  • The project is Kotlin or another JVM language with its own idioms
  • You need static analysis rather than agent guidance

Example request

Review this Spring Boot service for null safety, transactions and N+1 queries

Limitations

The skills target Java 11 and newer, with 17+ recommended. The routing check needs an OpenAI-compatible endpoint, which can be local. Setup scripts are shell-based.

How to disable. Delete the skill folders from the project's .claude/skills or the agent's directory.

Security check

  • The skills consist of instructions and checklists

README in short

The README explains the set's purpose, the skill routing check and two install paths: npx skills or cloning and running setup-project.sh. It includes a grouped skill table with trigger phrases, the repository layout and requirements. It mentions the pairing with a GitHub Action for review. MIT licensed.

SKILL.md

---
name: java-code-review
description: Systematic code review for Java with null safety, exception handling, concurrency, and performance checks. Use when user says "review code", "check this PR", "code review", or before merging changes.
license: MIT
---

# Java Code Review Skill

Systematic code review checklist for Java projects.

## When to Use
- User says "review this code" / "check this PR" / "code review"
- Before merging a PR
- After implementing a feature

## Review Strategy

1. **Quick scan** - Understand intent, identify scope
2. **Checklist pass** - Go through each category below
3. **Summary** - List findings by severity (Critical → Minor)

## Output Format

```markdown
## Code Review: [file/feature name]

### Critical
- [Issue description + line reference + suggestion]

### Improvements
- [Suggestion + rationale]

### Minor/Style
- [Nitpicks, optional improvements]

### Good Practices Observed
- [Positive feedback - important for morale]
```

---

## Review Checklist

### 1. Null Safety

FAQ

Are the skills used in CI?

Yes, the author uses the same skills for automated pull request review through the skill-review GitHub Action.

What does setup-project.sh do?

It creates .claude with symlinked skills in the Java project, generates CLAUDE.md and configures settings.

Editors’ pick

Official skills and agents from the .NET team: performance, MSBuild, NuGet, upgrades, testing, ASP.NET Core, Blazor and MAUI

PluginMedium risk5.4K
Editors’ pick

Laravel's official MCP server, guidelines and skills: the agent sees the DB schema, logs and package versions and searches ecosystem docs

MCP serverMedium risk3.6K
Editors’ pick

The official FastAPI skill, bundled with the package, teaching agents to write code for the installed version

SkillLow risk

Firebase MCP Server

Firebase CLI and MCP Server

Editors’ pick

Official Firebase MCP server from the Firebase CLI: projects, Firestore, Auth, Crashlytics, Remote Config and function logs

MCP serverHigh risk