Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add jiushiwon/wg-skills --skill springboot-init-skillgit clone --depth 1 https://github.com/jiushiwon/wg-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jiushiwon/wg-skills/springboot-init-skill)<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/springboot-init-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/springboot-init-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/springboot-init-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/springboot-init-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 137 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00229 | $0.03674 |
| Opus 5.5 | $0.00092 | $0.01470 |
| Sonnet 5.5 | $0.00046 | $0.00735 |
| Haiku 4.5 | $0.00023 | $0.00367 |
Grade A, and why
springboot-init-skill scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 20d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl http://localhost:8080/api/sse/chat How it starts
The opening of the file, as written. The whole thing — 218 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Spring Boot Init Skill
面向完全不懂 Java 编程的小白，一键生成标准化、开箱即用的 Spring Boot Web 服务骨架。
与其他后端 init-skill 的区别
| 维度 | 本 skill (Java) | fastapi-init (Python) | go-gin-init (Go) | nodejs-init (Node.js) |
|---|---|---|---|---|
| 目标用户 | 零基础小白 | 零基础小白 | 零基础小白 | 零基础小白 |
| 框架 | Spring Boot 3.x | FastAPI | Gin | Express.js |
| 默认数据库 | MySQL | MySQL | MySQL | MongoDB |
| 鉴权 | Spring Security 6 + JWT | Pydantic + JWT | Gin + JWT | passport.js + JWT |
| 启动方式 | ./restart.sh [dev|prod] |
./restart.sh [dev|prod] |
./restart.sh [dev|prod] |
npm start / npm run dev |
统一规范：所有 init-skill 共享相同的响应信封 { code, message, data }、错误码表、JWT 规范、分页约定和 api-contract.md 模板。
不重复造轮子：统一响应信封、错误码、JWT 规范与各 init-skill 内置的统一契约层对齐，模板已内置于本 skill（references/api-contract-template.md、references/project-guide-template.md）；关系型 DB 配置引用 database-design-skill；前端联动规范引用 frontend-request-skill。本 skill 在它们之上增加「小白友好」的完整封装。
依赖
- init-skill 内置契约层：响应信封
{ code, message, data }、错误码（-1001 校验 / -2000 系统）、JWT Bearer、api-contract、project-guide 规范已内置本 skill - database-design-skill：MySQL / PostgreSQL / MongoDB 选型规则、表前缀
wg、连接参数 - 骨架参考：
references/api-contract-template.md提供完整骨架结构与依赖参考 - frontend-request-skill：前端请求层规范，确保后端生成的接口契约可直接被前端消费
核心能力清单（11 项）
| # | 能力 | 说明 |
|---|---|---|
| 1 | 环境探测 | 自动检测 JDK 版本（>=17）、Maven、操作系统类型 |
| 2 | 自动安装 | 创建项目结构、生成 pom.xml、Maven wrapper、.bat UTF-8 BOM 编码 |
| 3 | 一键启动/重启 | ./restart.sh [dev|prod]：环境搭建、编译、安全停旧进程、启动、输出日志命令 |
| 4 | 开发模式 | ./restart.sh dev 热重载（spring-boot-devtools），日志 logs/dev.log |
| 5 | 生产模式 | ./restart.sh prod 后台运行，日志 logs/app.log |
| 6 | SSE 流式 | 内置 Spring WebFlux ServerSentEvent，示例端点 /api/sse/chat |
| 7 | 文件上传 | 内置 /api/upload 单文件与 /api/uploads 多文件上传 |
| 8 | 统一响应 | ResponseBodyAdvice 自动包装 { code, message, data } |
| 9 | 全局异常 | @RestControllerAdvice 统一处理 BusinessException / 校验异常 / 兜底异常 |
| 10 | JWT 鉴权 | Spring Security 6 + jjwt 0.12.x：注册 / 登录 / 刷新令牌 / 当前用户注入 |
| 11 | 安全头 | 内置 Spring Security 配置：X-Frame-Options / X-Content-Type-Options / CSRF 关闭（API） |
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- demo/.env.example 1.7 KB
- demo/.gitignore 154 B
- demo/.mvn/wrapper/maven-wrapper.jar 62 KB
- demo/.mvn/wrapper/maven-wrapper.properties 232 B
- demo/api-contract.md 3.2 KB
- demo/docker-compose.yml 836 B
- demo/Dockerfile 414 B
- demo/docs/project-guide.md 2.7 KB
- demo/mvnw 648 B
- demo/mvnw.cmd 445 B runs code
- demo/pom.xml 4.2 KB
- demo/README.md 2.0 KB
- demo/restart.bat 2.1 KB runs code
- demo/restart.sh 2.1 KB runs code
- demo/src/main/java/com/example/demo/Application.java 346 B
- demo/src/main/java/com/example/demo/common/ApiResponse.java 1.1 KB
- demo/src/main/java/com/example/demo/common/BusinessException.java 1.0 KB
- demo/src/main/java/com/example/demo/common/CurrentUser.java 395 B
- demo/src/main/java/com/example/demo/common/CurrentUserArgumentResolver.java 1.4 KB
- demo/src/main/java/com/example/demo/common/GlobalExceptionHandler.java 3.2 KB
- demo/src/main/java/com/example/demo/common/JwtAuthenticationFilter.java 2.6 KB
- demo/src/main/java/com/example/demo/common/JwtUtil.java 2.8 KB
- demo/src/main/java/com/example/demo/common/PageRequest.java 442 B
- demo/src/main/java/com/example/demo/common/PageResponse.java 1.4 KB
- demo/src/main/java/com/example/demo/config/LoggingFilter.java 2.0 KB
- demo/src/main/java/com/example/demo/config/OpenApiConfig.java 1.1 KB
- demo/src/main/java/com/example/demo/config/ResponseAdvice.java 1.6 KB
- demo/src/main/java/com/example/demo/config/SecurityConfig.java 3.0 KB
- demo/src/main/java/com/example/demo/config/WebConfig.java 984 B
- demo/src/main/java/com/example/demo/controller/AuthController.java 1.9 KB
- demo/src/main/java/com/example/demo/controller/HealthController.java 788 B
- demo/src/main/java/com/example/demo/controller/SseController.java 1.1 KB
- demo/src/main/java/com/example/demo/controller/UploadController.java 1.2 KB
- demo/src/main/java/com/example/demo/controller/UserController.java 1.9 KB
- demo/src/main/java/com/example/demo/dto/auth/LoginRequest.java 462 B
- demo/src/main/java/com/example/demo/dto/auth/RegisterRequest.java 788 B
- demo/src/main/java/com/example/demo/dto/auth/TokenResponse.java 333 B
- demo/src/main/java/com/example/demo/dto/upload/UploadResponse.java 307 B
- demo/src/main/java/com/example/demo/dto/user/ChangePasswordRequest.java 316 B
- demo/src/main/java/com/example/demo/dto/user/CreateUserRequest.java 448 B
- demo/src/main/java/com/example/demo/dto/user/UpdateProfileRequest.java 277 B
- demo/src/main/java/com/example/demo/dto/user/UserResponse.java 716 B
- demo/src/main/java/com/example/demo/entity/User.java 1.1 KB
- demo/src/main/java/com/example/demo/repository/UserRepository.java 440 B
- demo/src/main/java/com/example/demo/service/AuthService.java 2.9 KB
- demo/src/main/java/com/example/demo/service/SseService.java 3.5 KB
- demo/src/main/java/com/example/demo/service/UploadService.java 3.7 KB
- demo/src/main/java/com/example/demo/service/UserService.java 2.7 KB
- demo/src/main/resources/application.yml 2.9 KB
- demo/src/test/java/com/example/demo/ApplicationTests.java 289 B
- README.md 8.8 KB
- references/api-contract-template.md 7.0 KB
- references/db-guide.md 4.7 KB
- references/db-schema-guide.md 4.6 KB
- references/env-setup.md 3.3 KB
- references/frontend-integration.md 4.8 KB
- references/middleware-guide.md 6.9 KB
- references/project-guide-template.md 5.0 KB
- references/skeleton.md 70 KB
- references/sse-guide.md 5.8 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 20d ago Changed · +17 lines 26cff3dcbec7
- 1mo ago Changed · -7 lines 721356e9c287
- 1mo ago Changed b1791a1574f1
- 1mo ago First seen · 208 lines · 229 tokens per session scan A 6687627f3777
springboot-init-skill is a skill published in the GitHub repository jiushiwon/wg-skills (121 stars, last pushed yesterday), licensed Apache-2.0. It adds 229 tokens to every session and 3,674 once invoked, about $0.0009 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
wxjava-api-contributor
A contributor guide for adding or maintaining official WeChat API support in WxJava, a Java software development kit. It covers services, request and response data objects, data conversion, HTTP handling, starter configuration, and regression tests.
azure-communication-callautomation-java
Build call automation workflows with Azure Communication Services Call Automation Java SDK. Use when implementing IVR systems, call routing, call recording, DTMF recognition, text-to-speech, or AI-powered call flows.
azure-communication-chat-java
Build real-time chat applications with Azure Communication Services Chat Java SDK. Use when implementing chat threads, messaging, participants, read receipts, typing notifications, or real-time chat features.
azure-communication-common-java
Azure Communication Services common utilities for Java. Use when working with CommunicationTokenCredential, user identifiers, token refresh, or shared authentication across ACS services.
azure-communication-sms-java
Send SMS messages with Azure Communication Services SMS Java SDK. Use when implementing SMS notifications, alerts, OTP delivery, bulk messaging, or delivery reports.
java-coding-standards
Java coding standards for Spring Boot services: naming, immutability, Optional usage, streams, exceptions, generics, and project layout.