Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/hoangatg/ai-agent-toolkit/java-spring-bootnpx skills add hoangatg/ai-agent-toolkit --skill java-spring-bootgit clone --depth 1 https://github.com/hoangatg/ai-agent-toolkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hoangatg/ai-agent-toolkit/java-spring-boot)<a href="https://agentmods.dev/skills/hoangatg/ai-agent-toolkit/java-spring-boot"><img src="https://agentmods.dev/badge/skills/hoangatg/ai-agent-toolkit/java-spring-boot.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00048 | $0.00571 |
| Opus 5 | $0.00024 | $0.00285 |
| Sonnet 5 | $0.00010 | $0.00114 |
| Haiku 4.5 | $0.00005 | $0.00057 |
Grade A, and why
java-spring-boot scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 74 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Java & Spring Boot
Enterprise-grade Java development with Spring Boot 3.x, Spring Security, and modern patterns.
Core Principles
- Convention over Configuration: Spring Boot auto-configuration
- Production-Ready: Actuator, health checks, metrics out of the box
- Type Safety: Leverage Java's strong type system
- Dependency Injection: Constructor injection preferred
Stack Decisions
| Concern | Recommended |
|---|---|
| Build | Gradle (Kotlin DSL) or Maven |
| Java Version | 21+ (virtual threads, records, sealed classes) |
| Framework | Spring Boot 3.x |
| ORM | Spring Data JPA + Hibernate |
| Validation | Jakarta Validation (Bean Validation 3.0) |
| Security | Spring Security 6.x |
| Testing | JUnit 5 + Mockito + Testcontainers |
| API Docs | SpringDoc OpenAPI |
Project Structure
src/
├── main/
│ ├── java/com/example/app/
│ │ ├── config/ # Configuration classes
│ │ ├── controller/ # REST controllers
│ │ ├── service/ # Business logic
│ │ ├── repository/ # Data access
│ │ ├── model/ # JPA entities
│ │ ├── dto/ # Data transfer objects
│ │ ├── exception/ # Custom exceptions
│ │ └── Application.java # Entry point
│ └── resources/
│ ├── application.yml
│ └── db/migration/ # Flyway migrations
└── test/
Key Patterns
- DTO Pattern: Separate API shape from entity shape
- Service Layer: Business logic in @Service classes
- Repository Pattern: Spring Data JPA repositories
- Global Exception Handling: @ControllerAdvice
- Virtual Threads:
spring.threads.virtual.enabled=true
Anti-Patterns
| ❌ Don't | ✅ Do |
|---|---|
| Business logic in controllers | Use service layer |
| Field injection (@Autowired) | Constructor injection |
| Expose entities in API | Use DTOs |
| Ignore N+1 queries | Use @EntityGraph or JOIN FETCH |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 74 lines · 48 tokens per session scan A 151f60dd24d1
java-spring-boot is a skill published in the GitHub repository hoangatg/ai-agent-toolkit (1 stars, last pushed 5mo ago), licensed MIT. It adds 48 tokens to every session and 571 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
springboot-patterns
Spring Boot architecture patterns, REST API design, layered services, data access, caching, async processing, and logging. Use for Java Spring Boot backend work.
coding-standards
Universal coding standards, best practices, and patterns for TypeScript, JavaScript, React, and Node.js development.
golang-patterns
Idiomatic Go patterns, best practices, and conventions for building robust, efficient, and maintainable Go applications.
python-patterns
Pythonic idioms, PEP 8 standards, type hints, and best practices for building robust, efficient, and maintainable Python applications.
go
Project Kickstart - PRD-First Orchestrator.
gohm
/gohm - Go Harvest Memory (Knowledge Harvester).