Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add jiushiwon/wg-skills --skill springboot-init-skillgit clone --depth 1 https://github.com/jiushiwon/wg-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jiushiwon/wg-skills/springboot-init-skill)<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/springboot-init-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/springboot-init-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/springboot-init-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/springboot-init-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 137 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00229 | $0.03458 |
| Opus 5 | $0.00114 | $0.01729 |
| Sonnet 5 | $0.00046 | $0.00692 |
| Haiku 4.5 | $0.00023 | $0.00346 |
Grade A, and why
springboot-init-skill scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl http://localhost:8080/api/sse/chat How it starts
The opening of the file, as written. The whole thing — 208 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Spring Boot Init Skill
面向完全不懂 Java 编程的小白，一键生成标准化、开箱即用的 Spring Boot Web 服务骨架。
与 java-backend-skill 的区别
| 维度 | java-backend-skill | 本 skill |
|---|---|---|
| 目标用户 | 后端开发者 | 零基础小白 |
| 环境安装 | 用户自己装 | 自动检测 + 自动安装 |
| 启动方式 | mvn spring-boot:run | 一条命令：./restart.sh [dev|prod] |
| SSE 支持 | 无 | 内置 SSE 流式框架（WebFlux） |
| 文件上传 | 基础 | 增强版 /api/upload 单文件 + /api/uploads 多文件 |
| 默认数据库 | PostgreSQL | MySQL（可选 PG / MongoDB / 无数据库） |
| ORM | Spring Data JPA | Spring Data JPA（不变） |
| 鉴权 | 无 | Spring Security 6 + JWT（jjwt 0.12.x） |
| 文档 | 无 | springdoc-openapi 2（Swagger UI） |
| 响应包装 | 手动 | ResponseBodyAdvice 自动包装 { code, message, data } |
| 脚本 | 无 | 只生成 restart.sh / restart.bat（dev/prod 双模式） |
| Swagger | 无 | 有 + 增强注释 + 中文说明 |
| 交互次数 | 多个技术问题 | 最多 3 个问题 |
| 文件数 | ~30 | ~25 |
不重复造轮子：统一响应信封、错误码、JWT 规范与 backend-convention-skill 对齐，模板已内置于本 skill（references/api-contract-template.md、references/project-guide-template.md），生成项目不依赖 backend-convention-skill 文件；关系型 DB 配置引用 database-skill；前端联动规范引用 frontend-request-skill。本 skill 在它们之上增加「小白友好」的完整封装。
依赖
- backend-convention-skill：响应信封
{ code, message, data }、错误码（-1001 校验 / -2000 系统）、JWT Bearer、api-contract、project-guide 规范对齐（模板已内置本 skill） - database-skill：MySQL / PostgreSQL / MongoDB 选型规则、表前缀
wg、连接参数 - java-backend-skill：Spring Boot 骨架基础结构与 pom 依赖参考
- frontend-request-skill：前端请求层规范，确保后端生成的接口契约可直接被前端消费
核心能力清单（11 项）
| # | 能力 | 说明 |
|---|---|---|
| 1 | 环境探测 | 自动检测 JDK 版本（>=17）、Maven、操作系统类型 |
| 2 | 自动安装 | 创建项目结构、生成 pom.xml、Maven wrapper、.bat UTF-8 BOM 编码 |
| 3 | 一键启动/重启 | ./restart.sh [dev|prod]：环境搭建、编译、安全停旧进程、启动、输出日志命令 |
| 4 | 开发模式 | ./restart.sh dev 热重载（spring-boot-devtools），日志 logs/dev.log |
| 5 | 生产模式 | ./restart.sh prod 后台运行，日志 logs/app.log |
| 6 | SSE 流式 | 内置 Spring WebFlux ServerSentEvent，示例端点 /api/sse/chat |
| 7 | 文件上传 | 内置 /api/upload 单文件与 /api/uploads 多文件上传 |
| 8 | 统一响应 | ResponseBodyAdvice 自动包装 { code, message, data } |
| 9 | 全局异常 | @RestControllerAdvice 统一处理 BusinessException / 校验异常 / 兜底异常 |
| 10 | JWT 鉴权 | Spring Security 6 + jjwt 0.12.x：注册 / 登录 / 刷新令牌 / 当前用户注入 |
| 11 | 安全头 | 内置 Spring Security 配置：X-Frame-Options / X-Content-Type-Options / CSRF 关闭（API） |
What ships with it
13 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- README.md 9.5 KB
- references/api-contract-template.md 6.0 KB
- references/db-guide.md 4.7 KB
- references/db-schema-guide.md 4.6 KB
- references/env-setup.md 3.3 KB
- references/frontend-integration.md 4.8 KB
- references/middleware-guide.md 6.9 KB
- references/project-guide-template.md 5.0 KB
- references/skeleton.md 70 KB
- references/sse-guide.md 5.8 KB
- references/startup-scripts.md 5.9 KB
- scripts/generate_project.py 13 KB runs code
- SPEC.md 14 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 208 lines · 229 tokens per session scan A 6687627f3777
springboot-init-skill is a skill published in the GitHub repository jiushiwon/wg-skills (97 stars, last pushed 2d ago), licensed Apache-2.0. It adds 229 tokens to every session and 3,458 once invoked, about $0.0011 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
wxjava-module-selector
A decision guide for choosing the correct WxJava Maven module, dependency management file, and example for a WeChat use case. WxJava is a Java software development kit for services such as official accounts, mini programs, and payments.
wxjava-api-contributor
A contributor guide for adding or maintaining official WeChat API support in WxJava, a Java software development kit. It covers services, request and response data objects, data conversion, HTTP handling, starter configuration, and regression tests.
azure-communication-callautomation-java
Build call automation workflows with Azure Communication Services Call Automation Java SDK. Use when implementing IVR systems, call routing, call recording, DTMF recognition, text-to-speech, or AI-powered call flows.
azure-communication-chat-java
Build real-time chat applications with Azure Communication Services Chat Java SDK. Use when implementing chat threads, messaging, participants, read receipts, typing notifications, or real-time chat features.
azure-communication-common-java
Azure Communication Services common utilities for Java. Use when working with CommunicationTokenCredential, user identifiers, token refresh, or shared authentication across ACS services.
azure-communication-sms-java
Send SMS messages with Azure Communication Services SMS Java SDK. Use when implementing SMS notifications, alerts, OTP delivery, bulk messaging, or delivery reports.