spring-security-configuration
Generates Spring Security configuration classes for authentication and authorization in Java applications.
Install this skill
or
9/100
Security score
The spring-security-configuration skill was audited on Jun 14, 2026 and we found 7 security issues across 3 threat categories, including 6 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 132
Template literal with variable interpolation in command context
SourceSKILL.md
| 132 | (`${OAUTH_*_CLIENT_SECRET}`, `${LDAP_MANAGER_PASSWORD}`, |
high line 133
Template literal with variable interpolation in command context
SourceSKILL.md
| 133 | `${AUTHSERVER_*_CLIENT_SECRET}`) into `application.properties` and reports |
high line 199
Template literal with variable interpolation in command context
SourceSKILL.md
| 199 | (e.g. `@Value("${myapp.something}")` → `appPrefix = myapp`). If none found, default to `app`. |
high line 293
Template literal with variable interpolation in command context
SourceSKILL.md
| 293 | 9. If the generated properties contain any `${...}` env-var placeholders for credentials (`OAUTH_*_CLIENT_SECRET`, `LDAP_MANAGER_PASSWORD`, `AUTHSERVER_*_CLIENT_SECRET`), list every placeholder explic |
high line 130
Prompting for password/secret input
SourceSKILL.md
| 130 | text, not in any form. Secret values must not enter the conversation. For |
high line 293
Prompting for password/secret input
SourceSKILL.md
| 293 | 9. If the generated properties contain any `${...}` env-var placeholders for credentials (`OAUTH_*_CLIENT_SECRET`, `LDAP_MANAGER_PASSWORD`, `AUTHSERVER_*_CLIENT_SECRET`), list every placeholder explic |
low line 15
External URL reference
SourceSKILL.md
| 15 | - If `amplicode-install` is not registered in your skill list, tell the user (in their language): *"This skill needs the Amplicode IntelliJ plugin and its MCP server. Install it from https://amplicode |
Scanned on Jun 14, 2026
View Security DashboardGitHub Stars 60
Rate this skill
Categorydevelopment
UpdatedJune 15, 2026
clinefrontenddesigndocxgitapidevopsbackendbackend-developerdevops-sreproduct-managerdevelopmentproduct
Amplicode/spring-skills