Security Audit

This is a solid reference checklist for Java security audits that covers the OWASP Top 10 with practical code examples across Spring, Quarkus, Jakarta EE, and plain Java. It shows you the right way to do parameterized queries, input validation with Bean Validation annotations, XSS prevention with output encoding, and proper password hashing. The side-by-side good/bad examples make it easy to spot vulnerabilities during code review. Use this before production releases or when someone asks about security issues. The cross-framework approach is helpful since the validation and JDBC patterns work everywhere, though some features like CSRF configuration are framework specific.

Install to Claude Code

npx -y skills add decebals/claude-code-java --skill security-audit --agent claude-code