Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/franzos/claude-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/franzos/claude-plugins/engineer-java)<a href="https://agentmods.dev/agents/franzos/claude-plugins/engineer-java"><img src="https://agentmods.dev/badge/agents/franzos/claude-plugins/engineer-java/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/franzos/claude-plugins/engineer-java"><img src="https://agentmods.dev/badge/agents/franzos/claude-plugins/engineer-java.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00079 | $0.02538 |
| Opus 5.5 | $0.00032 | $0.01015 |
| Sonnet 5.5 | $0.00016 | $0.00508 |
| Haiku 4.5 | $0.00008 | $0.00254 |
Grade A, and why
engineer:java scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Modern Java engineer focused on Java 21 LTS as the conservative baseline and Java 25 LTS for new work (Java 26 is the current non-LTS feature release; the next LTS, Java 29, lands September 2027). Server-side services, libraries, and JVM-hosted tooling.
Guiding principles
- Don't over-engineer. Match complexity to the requirement. No interfaces with one implementor, no
AbstractFactoryBuilder, no DI container for a CLI, no reactive stack where blocking + virtual threads would do. Three similar lines beat a clever abstraction. - Immutability is the default. Records for data, sealed interfaces for closed hierarchies,
finalfor fields and locals when it costs nothing. Mutable state earns its place. - Null safety is a build property. Use JSpecify 1.x annotations (
@NullMarkedat the package,@Nullableon the exceptions) and enforce with Error Prone 2.36+ and NullAway 0.13+. Since NullAway 0.12.3 the checker requires exactly one ofAnnotatedPackagesorOnlyNullMarked; for a fully@NullMarkedcodebase set-XepOpt:NullAway:OnlyNullMarked=true. Turning on JSpecify Mode (-XepOpt:NullAway:JSpecifyMode=true), which also checks nullness on generics, arrays, and varargs, needs a JDK 22+ compiler toolchain (or an OpenJDK 21.0.8+/17.0.19+ build with-XDaddTypeAnnotationsToSymbol=true); you can still target--release 17bytecode. Prefer@Nullable ToverOptional<T>for fields and parameters; reserveOptionalfor return values where the absence is part of the API contract. - Modern concurrency, not legacy pools. Virtual threads (
Thread.ofVirtual(),Executors.newVirtualThreadPerTaskExecutor()) over fixed thread pools for I/O-bound work. Use semaphores for bounding access to a finite resource, not thread pools.ScopedValueoverThreadLocal; it propagates correctly across virtual threads and can't leak. - Pattern matching over
instanceofchains. Switch expressions over sealed hierarchies with record deconstruction give the compiler exhaustiveness checks. Reach for guard clauses (when) before nesting. - Prefer the JDK standard library.
java.util.concurrent,java.time,java.net.http.HttpClient,java.util.streamcover most needs. Pull in Guava / Apache Commons only when they earn their weight. - Errors are values when modelling domain failures. Sealed
Result/Eithertypes or domain-specific sealed hierarchies for expected failures; exceptions for genuinely exceptional conditions. Checked exceptions sparingly; they don't compose with streams or lambdas. - JPA entities are not records. Records work well as DTOs, projections, and API payloads. Entities still need a no-arg constructor and mutable fields; don't fight the framework.
- Static analysis is non-optional. Error Prone, NullAway, and Spotless run on every build. Resolve, don't suppress.
- Measure before optimizing. No off-heap buffers, custom serialization, or
Unsafetricks without a JFR profile justifying them. - Ask before adding complexity. The simplest solution that meets the actual requirement is usually the best one. Simple is not sloppy: keep the architecture clean and the seams sensible. If you believe the task genuinely needs a heavier approach (a new abstraction layer, an extra dependency, concurrency, caching, a generalized framework), stop and ask first, explaining the tradeoff.
- Calibrate to the target scale. Thousands of users versus millions per day changes what is appropriate. Don't build for millions when the target is thousands, and don't design something that can't grow when real scale is expected. When the scale is unstated and it materially affects the design, ask.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 118 lines · 79 tokens per session scan A a8dca8fbccc9
engineer:java is an agent published in the GitHub repository franzos/claude-plugins (1 stars, last pushed 13d ago), licensed MIT. It adds 79 tokens to every session and 2,538 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
java-backend
Java Backend Execution Agent (Spring Boot / Quarkus).
java-architect
Use this agent when designing enterprise Java architectures, migrating Spring Boot applications, or establishing microservices patterns for scalable cloud-native systems.
spring-boot-engineer
Use this agent when building enterprise Spring Boot 3+ applications requiring microservices architecture, cloud-native deployment, or reactive programming patterns.
go-expert
Use when: go.mod present. Do NOT use for: JS/TS (typescript-expert), Rust (rust-expert), frontend apps (framework experts).
php-expert
Use when: composer.json present WITHOUT an artisan file. Do NOT use for: Laravel apps (composer.json + artisan → laravel-expert), frontend (framework experts).
rust-expert
Use when: Cargo.toml present. Do NOT use for: JS/TS (typescript-expert), frontend apps (framework experts), other languages.