Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/giuseppe-trisciuoglio/developer-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/giuseppe-trisciuoglio/developer-kit/developer-kit-java)<a href="https://agentmods.dev/plugins/giuseppe-trisciuoglio/developer-kit/developer-kit-java"><img src="https://agentmods.dev/badge/plugins/giuseppe-trisciuoglio/developer-kit/developer-kit-java/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/giuseppe-trisciuoglio/developer-kit/developer-kit-java"><img src="https://agentmods.dev/badge/plugins/giuseppe-trisciuoglio/developer-kit/developer-kit-java.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
developer-kit-java scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 100 lines — stays where its author put it; the contents beside it link to each section on GitHub.
{
"name": "developer-kit-java",
"version": "4.0.1",
"description": "Comprehensive Java development toolkit with Spring Boot, testing, LangChain4J, and AWS integration",
"author": {
"name": "Giuseppe Trisciuoglio",
"email": "[email protected]"
},
"homepage": "https://github.com/giuseppe-trisciuoglio/developer-kit",
"repository": "https://github.com/giuseppe-trisciuoglio/developer-kit.git",
"license": "MIT",
"keywords": [
"java",
"spring-boot",
"junit",
"langchain4j",
"aws-sdk",
"testing"
],
"agents": [
"./agents/spring-boot-backend-development-expert.md",
"./agents/spring-boot-code-review-expert.md",
"./agents/spring-boot-unit-testing-expert.md",
"./agents/java-refactor-expert.md",
"./agents/java-security-expert.md",
"./agents/java-software-architect-review.md",
"./agents/java-documentation-specialist.md",
"./agents/java-tutorial-engineer.md",
"./agents/langchain4j-ai-development-expert.md"
],
"commands": [
"./commands/devkit.java.code-review.md",
"./commands/devkit.java.generate-crud.md",
"./commands/devkit.java.refactor-class.md",
"./commands/devkit.java.architect-review.md",
"./commands/devkit.java.dependency-audit.md",
"./commands/devkit.java.generate-docs.md",
"./commands/devkit.java.security-review.md",
"./commands/devkit.java.upgrade-dependencies.md",
"./commands/devkit.java.write-unit-tests.md",
"./commands/devkit.java.write-integration-tests.md",
"./commands/devkit.java.generate-refactoring-tasks.md"
],
"skills": [
"./skills/spring-boot-actuator",
"./skills/spring-boot-cache",
"./skills/spring-boot-crud-patterns",
"./skills/spring-boot-dependency-injection",
"./skills/spring-boot-event-driven-patterns",
"./skills/spring-boot-openapi-documentation",
"./skills/spring-boot-rest-api-standards",
"./skills/spring-boot-saga-pattern",
"./skills/spring-boot-security-jwt",
".What it installs
The manifest is a name and a version. 52 skills, 11 commands, 9 agents travel with it, and installing the plugin installs all of them — 4,655 tokens a session between them. Each is measured on its own page, and each can be installed alone.
- Skill aws-sdk-java-v2-kms A 60 tokens
- Skill clean-architecture A 79 tokens
- Skill spring-boot-security-jwt A 66 tokens
- Skill aws-sdk-java-v2-bedrock A 92 tokens
- Skill aws-sdk-java-v2-dynamodb A 55 tokens
- Skill langchain4j-rag-implementation-patterns A 86 tokens
- Skill spring-boot-project-creator A 89 tokens
- Skill spring-boot-resilience4j A 82 tokens
- Skill spring-data-neo4j A 94 tokens
- Skill unit-test-caching A 88 tokens
- Skill aws-rds-spring-boot-integration A 83 tokens
- Skill aws-sdk-java-v2-lambda A 49 tokens
- Skill aws-sdk-java-v2-rds A 53 tokens
- Skill aws-sdk-java-v2-s3 A 58 tokens
- Skill langchain4j-spring-boot-integration A 88 tokens
- Skill langchain4j-tool-function-calling-patterns A 82 tokens
- Skill langchain4j-vector-stores-configuration A 77 tokens
- Skill spring-ai-mcp-server-patterns A 76 tokens
- Skill spring-boot-actuator A 50 tokens
- Skill spring-boot-crud-patterns A 79 tokens
- Skill spring-boot-event-driven-patterns A 90 tokens
- Skill spring-boot-openapi-documentation A 65 tokens
- Skill spring-boot-saga-pattern A 58 tokens
- Skill spring-boot-test-patterns A 64 tokens
- Skill unit-test-boundary-conditions A 84 tokens
- Skill unit-test-config-properties A 75 tokens
- Skill unit-test-json-serialization A 59 tokens
- Skill aws-lambda-java-integration A 99 tokens
- Skill aws-sdk-java-v2-messaging A 58 tokens
- Skill aws-sdk-java-v2-secrets-manager A 61 tokens
- Skill langchain4j-ai-services-patterns A 85 tokens
- Skill langchain4j-mcp-server-patterns A 76 tokens
- Skill langchain4j-testing-strategies A 81 tokens
- Skill qdrant A 50 tokens
- Skill spring-boot-dependency-injection A 52 tokens
- Skill spring-boot-rest-api-standards A 49 tokens
- Skill unit-test-application-events A 60 tokens
- Skill unit-test-bean-validation A 84 tokens
- Skill unit-test-controller-layer A 68 tokens
- Skill unit-test-exception-handler A 72 tokens
- Skill unit-test-parameterized A 71 tokens
- Skill unit-test-security-authorization A 49 tokens
- Skill unit-test-utility-methods A 77 tokens
- Skill aws-sdk-java-v2-core A 62 tokens
- Skill spring-boot-cache A 79 tokens
- Skill spring-data-jpa A 56 tokens
- Skill unit-test-mapper-converter A 72 tokens
- Skill unit-test-scheduled-async A 84 tokens
- Skill unit-test-service-layer A 52 tokens
- Skill wiremock-standalone-docker A 73 tokens
- Skill unit-test-wiremock-rest-api A 65 tokens
- Skill graalvm-native-image B 124 tokens
- Command devkit.java.generate-docs A 25 tokens
- Command devkit.java.dependency-audit A 27 tokens
- Command devkit.java.code-review A 31 tokens
- Command devkit.java.upgrade-dependencies A 35 tokens
- Command devkit.java.write-integration-tests A 41 tokens
- Command devkit.java.refactor-class A 26 tokens
- Command devkit.java.security-review A 26 tokens
- Command devkit.java.write-unit-tests A 34 tokens
- Command devkit.java.architect-review A 29 tokens
- Command devkit.java.generate-crud A 31 tokens
- Command devkit.java.generate-refactoring-tasks A 34 tokens
- Agent java-tutorial-engineer A 71 tokens
- Agent java-refactor-expert A 61 tokens
- Agent langchain4j-ai-development-expert A 65 tokens
- Agent spring-boot-unit-testing-expert A 58 tokens
- Agent java-documentation-specialist A 68 tokens
- Agent java-software-architect-review A 66 tokens
- Agent java-security-expert A 85 tokens
- Agent spring-boot-backend-development-expert A 47 tokens
- Agent spring-boot-code-review-expert A 55 tokens
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed 6cefab6e5fef
- 1mo ago First seen · 100 lines scan A d366f8232f5e
developer-kit-java is a plugin published in the GitHub repository giuseppe-trisciuoglio/developer-kit (360 stars, last pushed 1mo ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
azure-sdk-java
Azure SDK patterns and best practices for Java developers covering AI, communication, storage, identity, monitoring, and management libraries.
springboot-architecture
Skills for creating Spring Boot projects with architecture patterns (Layered to DDD+Hexagonal).
amplicode-spring-skills
Best skills for Spring Boot development powered by Amplicode Team.
spring-boot-plugin
A plugin to generate production-grade Spring Boot applications with Java, Spring Security, JPA, and comprehensive testing.
humanizer
Rewrite AI-sounding text so it reads like the writer without changing what it says.
nextjs
Official Next.js skills: adopt and optimize Cache Components, adopt Partial Prefetching, and verify runtime behavior against a running dev server.