ZappushZappush
SkillsUse CasesBenchmarkCommunitySign In
      Back to Skills
      k2-code

      Safety Report

      SpringBoot升级-BW

      @k2-code

      将 Spring Boot 2.7 项目升级到 Spring Boot 3.5 的实战流程,覆盖版本基线、依赖坐标替换、Jakarta 迁移、配置兼容、异步上下文传递改造与验证门禁。用于企业多模块 Maven 项目升级与排障。

      99Downloads
      0Installs
      0Stars
      1Versions

      Security Analysis

      high confidence
      Clean0.08 risk

      An instruction-only skill whose required actions and references match its stated purpose of guiding a Spring Boot 2.7 → 3.5 upgrade; no unusual credentials, installs, or hidden endpoints are requested.

      Apr 8, 20266 files2 concerns
      Purpose & Capabilitynote

      The skill's name/description, checklist, and referenced matrices all align with performing a multi-module Maven upgrade (dependency replacement, Jakarta migration, config changes, verification). It references internal corporate artifacts (com.baiwang.* starters and rewrite recipes), which is coherent for enterprise use but may be irrelevant or surprising to external users.

      Instruction Scopeok

      SKILL.md and reference docs instruct repository scans (ripgrep), POM edits, code migrations, and running Maven build/verification commands — all expected for an upgrade workflow. There are no instructions to read unrelated system files, access environment secrets, or transmit data to external endpoints.

      Install Mechanismok

      No install spec and no code files; the skill is instruction-only, so nothing is written to disk or downloaded by the skill itself. Recommended optional tooling (rg, mvn, openrewrite plugin) are standard developer tools and are invoked outside the skill.

      Credentialsnote

      The skill declares no environment variables or credentials. It does recommend internal dependencies and an OpenRewrite recipe (com.baiwang.rewrite...) which may rely on internal artifact repositories; this is proportionate to the stated enterprise upgrade purpose but could be unexpected for users outside that org.

      Persistence & Privilegeok

      always is false and there is no install behavior or code that modifies agent/system configuration. The skill does not request persistent privileges or cross-skill configuration access.

      Guidance

      This is an instruction-only upgrade playbook — it does not request credentials or download code. Before using: run it on a feature branch or test repository; review any suggested POM/dependency changes and OpenRewrite recipes before executing them (they can perform large automated edits); ensure your CI and local JDK/Maven versions match the checklist (JDK 21, Maven 3.9+); if you are not part of the referenced organization, remove or replace com.baiwang.* internal starters/recipes or ensure you have access to the artifact repository. Treat the skill as a procedural guide rather than an automated installer and review all changes in PRs.

      Latest Release

      v1.0.0

      Spring Boot 2.7 到 3.5 升级实战流程上线: - 提供从 2.7 到 3.5 的分阶段升级流程与常见问题排查。 - 覆盖环境基线、依赖替换、Jakarta 迁移、配置兼容与常用组件改造。 - 适配多模块 Maven 企业项目,重点处理依赖冲突与配置迁移。 - 完善升级验证标准与输出模板,便于后续复用和问题溯源。

      Popular Skills

      codeql-skill

      @k2-l · 0 stars

      my-crypto-signal-skill

      @k2-l · 0 stars

      self-improving-agent

      @pskoett · 1,456 stars

      Gog

      @steipete · 672 stars

      Tavily Web Search

      @arun-8687 · 620 stars

      Find Skills

      @JimLiuxinghai · 529 stars

      Published by @k2-code on ClawHub

      Zappush© 2026 Zappush
      HomeGuaranteeSupport

      Something feels unusual? We want to help: [email protected]