Skip to main content

spring-security-configuration

Generates Spring Security configuration classes for authentication and authorization in Java applications.

Install this skill

or
9/100

Security score

The spring-security-configuration skill was audited on Jun 14, 2026 and we found 7 security issues across 3 threat categories, including 6 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 132

Template literal with variable interpolation in command context

SourceSKILL.md
132(`${OAUTH_*_CLIENT_SECRET}`, `${LDAP_MANAGER_PASSWORD}`,
high line 133

Template literal with variable interpolation in command context

SourceSKILL.md
133`${AUTHSERVER_*_CLIENT_SECRET}`) into `application.properties` and reports
high line 199

Template literal with variable interpolation in command context

SourceSKILL.md
199(e.g. `@Value("${myapp.something}")` → `appPrefix = myapp`). If none found, default to `app`.
high line 293

Template literal with variable interpolation in command context

SourceSKILL.md
2939. If the generated properties contain any `${...}` env-var placeholders for credentials (`OAUTH_*_CLIENT_SECRET`, `LDAP_MANAGER_PASSWORD`, `AUTHSERVER_*_CLIENT_SECRET`), list every placeholder explic
high line 130

Prompting for password/secret input

SourceSKILL.md
130text, not in any form. Secret values must not enter the conversation. For
high line 293

Prompting for password/secret input

SourceSKILL.md
2939. If the generated properties contain any `${...}` env-var placeholders for credentials (`OAUTH_*_CLIENT_SECRET`, `LDAP_MANAGER_PASSWORD`, `AUTHSERVER_*_CLIENT_SECRET`), list every placeholder explic
low line 15

External URL reference

SourceSKILL.md
15- If `amplicode-install` is not registered in your skill list, tell the user (in their language): *"This skill needs the Amplicode IntelliJ plugin and its MCP server. Install it from https://amplicode
Scanned on Jun 14, 2026
View Security Dashboard
Installation guide →