Java plugins

Automate technical debt reduction, dependency updates, and code refactoring by scanning for vulnerabilities and code smells, generating prioritized remediation plans, and leveraging AI-powered test automation and code review.

Run comprehensive security analysis: SAST vulnerability detection across multiple languages, dependency scanning with automated remediation, threat modeling (STRIDE/attack trees), container and cloud security hardening, and compliance checks (OWASP Top 10, GDPR/HIPAA/SOC2) — all automated through CLI commands and agents.

Audit dependencies across multiple languages for vulnerabilities, license issues, and outdated packages, with actionable remediation strategies. Also modernizes legacy codebases through safe, incremental framework migrations and dependency updates.

Build high-performance games in Unity (DOTS, C#, URP/HDRP) and Godot 4 (GDScript), and develop Minecraft server plugins with Bukkit/Spigot/Paper APIs, including architecture, event systems, and optimization.

Provides a team of specialized expert agents that each deep-dive into specific languages and frameworks—from Angular and React to Rust, Go, Java, Swift, and more—so you can delegate complex, language-specific tasks like architecture design, performance optimization, and enterprise patterns to the right expert on demand.

Orchestrate a structured legacy codebase modernization pipeline — discover and assess systems, extract business rules, map dependencies, uplift versions across stacks (Java, .NET, Node, Python), and harden with adversarial security reviews and behavioral equivalence tests.

Use specialized AI agents for Java, Scala, and C#/.NET development to assist with enterprise patterns, microservices, performance optimization, and testing.

Get Java code intelligence in Claude Code: diagnostics, go-to-definition, find references, hover info, and code completion powered by the Eclipse JDT Language Server.

Configure and run SAST tools (Semgrep, SonarQube, CodeQL) for automated vulnerability detection in application code, with support for custom rules, CI/CD integration, quality gates, and false positive triage

Decompile Android APK/XAPK/JAR/AAR files to Java source and resources using jadx, extract HTTP API endpoints, and trace call flows from UI to network layer for security analysis.

Migrate Java code from javax.* to jakarta.* namespace for upgrading to Tomcat 11 or Jakarta EE 10. Automatically detects javax imports and performs the migration.

Scans codebases for security vulnerabilities using CodeQL and Semgrep static analysis. Automatically creates databases, runs query suites, processes SARIF output, and integrates findings into CI/CD pipelines.

Fuzz C/C++, Rust, Python, and Ruby code with coverage-guided fuzzers (libFuzzer, AFL++, cargo-fuzz), detect memory errors via sanitizers, and set up continuous fuzzing with OSS-Fuzz. Includes static analysis with Semgrep and CodeQL, timing side-channel detection, and cryptographic test vectors.

Detect memory leaks across Node.js, Python, and Java applications by scanning for unremoved event listeners, uncancelled timers, unbounded caches, and circular references, then generate severity-rated reports with file locations and fix recommendations.

Run a complete penetration test workflow — authorize targets, scan for vulnerabilities across code and network, map findings to OWASP Top 10, and produce executive reports with chain-of-custody.

Conduct security assessments of Apache Shiro applications by exploiting the rememberMe deserialization vulnerability (Shiro-550) for key cracking, gadget chain detection, command execution, and memory shell injection.

Add configurable rate limiting to API endpoints using token bucket, sliding window, or fixed window algorithms with Redis for distributed state management across Node.js, Python/FastAPI, and Java backends

Ensure API contract compliance by validating responses against OpenAPI and JSON schemas, detecting schema drift, and verifying data integrity in middleware or tests.

Analyze code coverage metrics (line, branch, function) across JavaScript, TypeScript, Python, Go, and Java projects. Identify untested code paths, dead code, and coverage gaps, then generate detailed reports with per-file breakdowns and actionable recommendations.

Audit web app and API authentication against OWASP/NIST standards, covering password hashing, JWT handling, sessions, OAuth flows, MFA, and account controls. Also validates authentication configuration, tokens, and credentials for correctness.

Audit web app session management for vulnerabilities including fixation, ID generation, expiration, cookie attributes, storage, and invalidation, and check current session status.

Automate Guidewire InsuranceSuite development and operations: CI/CD pipeline design, PolicyCenter/ClaimCenter lifecycle automation via Cloud API, OAuth2 authentication hardening, Gosu hot-reload and TDD workflows, cloud migration, production-grade API client with retry/pagination, SOC 2 security hardening, and event-driven integrations with AWS/Kafka/webhooks.

Generate production-ready REST APIs from OpenAPI specs or schemas, with CRUD endpoints, pagination, filtering, authentication, validation, and test scaffolding for Express, FastAPI, Spring Boot, Gin, and NestJS.

Profile application performance across Node.js, Python, and Java stacks by analyzing CPU, memory, and execution hotspots, then generate a markdown report with optimization recommendations.

Generate type-safe client SDKs from OpenAPI specs for TypeScript, Python, Go, and Java with built-in auth, retries, pagination, tests, and documentation.

Implement standardized API error handling with RFC 7807 responses, custom error classes, middleware, and logging across multiple backends (Node.js, Python, Java, Go).

Build API monitoring dashboards with Prometheus metrics, Grafana visualizations, health checks, synthetic probes, and SLO tracking for performance and uptime observability.

Capture and log API requests with structured logging, correlation IDs, performance metrics, PII redaction, and security audit trails for debugging, analysis, and compliance

Integrate with Veeva Vault for life sciences document management, clinical operations, and CRM using REST API, VQL queries, and VAPIL Java SDK across authentication, CRUD, deployment, migration, security, and observability workflows.

Delegate coding tasks to expert AI agents specialized in Python, Go, Rust, Java, JavaScript, PHP, Ruby/Rails, C/C++, SQL, and TypeScript. They proactively write idiomatic code, refactor for performance, implement advanced features like concurrency and generics, add tests with pytest or RSpec, optimize queries/schemas, and handle builds like Cargo.toml or CMake.

Audits Armeria-based Java projects for event loop blocking issues by discovering project patterns, scanning for blocking operations, tracing call chains, and producing a fix plan without modifying code.

Exploits Apache Shiro-550 (CVE-2016-4437) rememberMe deserialization vulnerability via CLI: automates key brute-force, gadget chain detection, command execution, memory shell injection, and key modification for single targets.

Provides Azure SDK patterns and best practices for Java developers to build applications across AI, communication, storage, identity, monitoring, and management services.

Installs a unified AI coding assistant configuration system with rules, skills, and commands to enforce coding standards, automate code reviews, commit messages, project setup, and generate documentation across multiple languages and frameworks (Go, Java, Python, TypeScript, Vue, etc.).

Accelerate blockchain development with agents that help write and audit Solidity smart contracts, and build Hyperledger Fabric chaincode with enterprise network architecture.

Manage the full Elastic stack lifecycle from Claude Code: provision and configure Elastic Cloud projects, query and analyze data with ES|QL, manage security (RBAC, audit logs, authentication), create Kibana dashboards and alerts, instrument applications with OpenTelemetry, triage security alerts, and investigate Kubernetes and LLM performance.

Run mutation testing to measure test suite effectiveness across JavaScript, TypeScript, Python, and Java. Automatically detects language, installs tool, calculates mutation score, and suggests test cases for survived mutants.

Translate natural language into regex patterns across multiple flavors (JavaScript, Python, Go, Java, PCRE), then test them against sample inputs with captured groups and performance metrics

Develop Java enterprise applications with Spring Boot, AWS cloud services, and LangChain4j AI agents. Generate CRUD REST APIs, validate architecture, audit security, and test with Testcontainers.

Execute trades on Taiwan equity and derivatives markets (TWSE/TPEX/TAIFEX) through Shioaji's Python binding, CLI tool, or HTTP API server with server-sent events for real-time market data and order handling.

Analyze codebases for tech debt, security vulnerabilities, and modernization opportunities, then automatically migrate and upgrade them to AWS — transforming .NET Framework, mainframe COBOL, VMware VMs, SQL Server, and upgrading Java/Python/Node.js versions and AWS SDKs.

Integrate and manage Stripe payments: configure checkout sessions, billing flows, Connect accounts, and Treasury. Set up new Stripe projects with CLI, and safely upgrade API versions and SDKs across Python, Ruby, Node.js, Java, Go, and .NET.

Plan, generate, and maintain QA automation across Playwright, Selenium, and API testing from a single interface. Includes accessibility auditing (WCAG 2.1 AA), test plan design, ISTQB-aligned artifact generation, and a multi-agent orchestrator that delegates to specialized bots for debugging, regression optimization, and code quality improvements.

Reverse-engineer database schemas into Apache Cayenne DataMaps, generate Java entity classes, write ORM queries, and configure CayenneRuntime — all from Claude Code.

Perform security code reviews across all languages using Project CodeGuard and OWASP rules, produce markdown reports with prioritized findings, and guide migration of C/C++/Assembly code to memory-safe languages like Rust, Go, Java, C#, or Swift.

Build and debug GraalVM Native Image applications from Java projects using native-image CLI, Maven, or Gradle Native Build Tools, with reachability metadata and runtime issue diagnosis.

Manage Qdrant vector search deployments end-to-end: scaling, performance tuning, search relevance optimization, multitenancy, zero-downtime upgrades, embedding model migration, monitoring with Prometheus/Grafana, and Edge deployment for local vector search

Guide usage of SAP Business Application Studio on SAP BTP, including setting up subscriptions and dev spaces, connecting to external systems, deploying MTA applications, managing Git repositories, and configuring runtime versions for Node.js, Java, and Python.

Implement OAuth 2.0 and OpenID Connect flows including Authorization Code + PKCE, Client Credentials, and token refresh for web apps, SPAs, and services, with examples in Express.js and references for Flask and Spring.

Provides Java and Spring Boot development workflows including nullability checking, pair programming, Spring Boot 4.x application scaffolding with best practices, and automated code review for quality and security.

Build and manage enterprise integrations on SAP BTP Integration Suite: develop iFlows, configure API proxies, set up Event Mesh, handle B2B/EDI adapters, process messages with Groovy/JavaScript, and manage hybrid deployments including Edge Integration Cell and Kyma.

Build Stellar blockchain applications in Java using the stellar-sdk for transactions, Horizon queries, Soroban smart contracts, XDR/SCVal conversion, and SEP protocol integrations. Enables AI-assisted development of Stellar dApps with transaction building, signing, and deployment workflows. Targets developers building on the Stellar network with Java.

Enforce a dual-review, state-machine-gated development workflow with hook-enforced code review, pre-commit checks, test coverage analysis, and fail-closed safety gates across feature development, bug fixes, and refactoring.

Automate code review with language-aware analysis, pre-commit verification for staged changes, and multi-specialist deep reviews that post to GitHub or GitLab. Supports Go, Python, Rust, TypeScript, Java.

Build AI-powered applications on SAP BTP using SAP AI Core, Generative AI Hub, or Orchestration Service, with support for LLM tasks, content filtering, data masking, document grounding, and LangChain/Spring AI integration.

Guides development of business applications on SAP Business Technology Platform (BTP) using CAP (Node.js/Java) or ABAP Cloud, covering Cloud Foundry/Kyma deployments, SAP HANA Cloud integration, SAP Fiori UI implementation, CI/CD pipelines, and observability

Guides creation and review of SAP API documentation per the SAP API Style Guide, covering REST, OData, Java, JavaScript, .NET, and C/C++ APIs with rules for naming conventions, OpenAPI specs, doc comments, quality checklists, and deprecation policies.

Spring Boot development accelerator: code generation for controllers, DTOs, security, and Kafka; testing with coverage; debugging; project exploration; and Spring Data best practices.

Develop, debug, and deploy Android applications using Jetpack Compose, Kotlin Coroutines, and Clean Architecture. Automate Google Play releases, manage in-app purchases, monitor crash reports, and optimize build performance with Gradle. Includes testing patterns, UI audits, and Play Console integration.

Work with Neo4j graph databases: Cypher queries, graph modeling, Aura provisioning, GraphRAG pipelines, vector indexes, Graph Data Science algorithms, data imports, Kafka/Spark integrations, and driver management for multiple languages.

Neo4j graph database expert for data modeling, Cypher query writing and optimization, schema design, driver upgrades, and graph performance tuning. Includes CLI tools for database management, modern Cypher 25 query generation, and migration of driver code from 4.x/5.x to 6.x.

An engineering discipline layer that provides structured workflows for full-stack development, infrastructure management, startup validation, and team coordination — with commands for building features, debugging, deploying, reviewing code, managing Terraform/AWS, running QA, and creating investor materials.

Guides SAP CAP development end-to-end: CDS data modeling, service implementation, OData APIs, Fiori UIs, database configuration (SQLite, HANA, PostgreSQL), deployment to Cloud Foundry/Kyma, and troubleshooting. Includes CDS language server, project scaffolding, and pre-deployment validation.

Look up the public API of any JVM dependency (Scala 3, Scala 2, Java) from the terminal — type signatures, members, docs, and source as Markdown — without unpacking JARs.

Validates multi-language tool installations across Python, Node.js, Java, Go, Rust, and C/C++; generates HTML artifacts and Preact SPAs; creates MCP servers and bookmarklets; produces git patches for local application; and queries Markdown documents structurally.

A comprehensive skill agent system that transforms Claude Code into a multi-agent development platform with auto-extracted skills and hooks

Search and read source code of Gradle-managed Kotlin/Java dependencies directly from the CLI, inspecting API shapes and implementations without needing to open .gradle files or navigate external sources.

Navigate and explore codebases using tree-sitter structural indexing: find symbols, read function implementations, trace callers and execution paths, discover tests, and perform scope-aware grep across Rust, Python, TypeScript, JavaScript, Go, Java, and Scala.

Configure, instrument, and troubleshoot OpenTelemetry observability across multiple languages and the Collector pipeline, including SDK setup, YAML configuration, OTTL debugging, version lookups, and synthetic telemetry generation.

Guides developers through configuring tsk Docker container images for their project, including detecting project stacks (Rust, Go, Node, Python, Java, Lua), migrating deprecated Dockerfiles to tsk.toml layers, running dry-run builds, and troubleshooting issues.

Audit and optimize Apache Kafka clusters via Lenses MCP—review connectors, consumer lag, DLQ, schema evolution, performance, security, and topic configs; scaffold Python producers/consumers and TestContainers tests with ShadowTraffic synthetic data.

Run the Eclipse JDT Language Server in Claude Code, providing Java autocompletion, diagnostics, code navigation, and refactoring.

Audits mobile app projects against Apple App Store and Google Play review policies before submission, supporting native, Flutter, React Native, Expo, Kotlin Multiplatform, .NET MAUI, Cordova, Ionic, and Unity projects.

Run a full audit-firm lifecycle for Solana/Anchor programs and any-language codebases: automated + interactive audits with 1,346+ checklist items across 20 domains, differential PR scanning, economic exploit quantification, PoC generation, verified fix patches, and professional report assembly with maturity scorecards.

Write and refactor Java code with expert guidance on concurrency (threads, CompletableFuture, virtual threads), generics (type parameters, wildcards, bounds), and Streams API (filter, map, flatMap, collect). Includes Eclipse JDTLS LSP for code intelligence like go-to-definition and diagnostics.

Enforce Java code style and quality standards using Checkstyle with built-in checks, custom check development, and XML configuration.

Write and maintain Cucumber BDD tests using Gherkin syntax, with best practices for feature files, scenario outlines, and step definitions in JavaScript/TypeScript, Java, and Ruby. Also automatically formats and tests Kotlin code during editing.

Enforce quality and validate Apache Maven projects by managing build lifecycles, resolving dependency conflicts, configuring plugins, and optimizing POM files for Java builds.

Annotate code with AI markers for technical debt, security vulnerabilities, performance bottlenecks, and accessibility issues; create bidirectional links between code and documentation; and add structured TODO comments and decision records to preserve context for AI-assisted development.

Apply object-oriented programming principles including encapsulation, inheritance vs composition, and polymorphism using Java and Python examples with validated getters/setters, defensive copying, and interface-based design.

Adds Shen formal verification to AI coding workflows: generates compile-time guard types from sequent-calculus specs, enforces invariants during build, and runs spec-equivalence gates against handwritten Go implementations.

Generates full-stack Angular and Spring Boot JPA code from entity models, including Flyway migrations, REST controllers, and Playwright or Vitest tests, with browser automation and Java API docs via MCP.

Analyze Java JAR/WAR/Class files for security vulnerabilities by building a SQLite database of classes, methods, calls, and Spring components, then running SQL-based security audits including call chain analysis and vulnerability detection.

Explore and navigate unfamiliar Scala/Java codebases via CLI, with fast symbol lookup, definition finding, implementation discovery, usage tracking, and ASCII art dependency graphs.

Implement comprehensive JUnit testing workflows in Java, including test setup, lifecycle management, custom extensions, and parameterized tests with various value sources.

Build, deploy, and manage streaming data pipelines on Apache Kafka and Confluent Cloud with skills for CDC, Flink UDFs, Kafka Streams, Schema Registry, and client libraries in Python and Java.

Build, serialize, and deserialize genealogical data models (persons, relationships, events) using the GEDCOM X Java library, with expertise in JAXB/XML and Jackson/JSON serialization and FamilySearch API integration.

Generate videos, images, and audio at scale using Runway's API, including batch ad campaigns, product videos, multishot stories, and creative iteration with AI avatars, WebRTC calls, and media generation workflows.

Manage Quarkus applications from Claude Code: scaffold projects, run dev mode, execute builds and tests, manage extensions, and search documentation via MCP tools running locally with jbang.

Manage the full Testany test lifecycle: generate test cases from requirements, orchestrate pipelines with dependencies and variable relays, execute tests with monitoring, diagnose failures with root cause analysis, and configure CI/CD triggers via webhooks or scheduled plans.

Curated collection of 140+ skills, commands, agents, and hooks for Claude Code that enforces TDD, code review, security scanning, multi-model orchestration, session management, and project-specific coding standards across TypeScript, Python, Go, Java, Kotlin, Swift, and C++ stacks.

Write and execute TestNG tests for Java projects using annotations, data providers, and parallel execution. Supports Maven/Gradle setup and XML-based configuration for test suites.

Attach to running JVMs or launch new ones under JDB to debug Java applications interactively. Set breakpoints, step through code, inspect variables and threads, analyze stack traces and thread dumps, diagnose exceptions and deadlocks, and generate consolidated debug reports.

Provides a structured, context-driven development workflow that guides projects from discovery and specification through implementation, with integrated code review, testing, and security analysis. Supports project management via Jira and GitLab, and includes skills for Java, TypeScript, and REST API design.

Accelerate full-stack development on the Vaadin/jOOQ stack by generating UI views, jOOQ database queries, Flyway migrations, and unit or E2E tests from requirements.

Provides idiomatic coding guidance for C#/.NET, Go, Java/Kotlin, Python, Rust, TypeScript, and web (HTML/CSS/HTMX), plus an agent that applies changes and runs build/test/lint gates.