Imported from jabrena/plinth (skills/504-frameworks-micronaut-security/SKILL.md). Install upstream with npx skills add jabrena/plinth --skill 504-frameworks-micronaut-security. Copyright stays with the author (Apache-2.0).

Micronaut Security Guidelines

Name: 504-frameworks-micronaut-security
Author: jabrena

Apply Micronaut security best practices with secure-by-default API boundaries.

What is covered in this Skill?

Micronaut security configuration and authentication setup
Authorization with @Secured and role-based policies
Endpoint and route protection strategy
Least-privilege design and policy boundaries
Secure error/denial behavior
Sensitive data handling in logs and responses

Scope: Apply recommendations based on the reference rules and good/bad examples.

Constraints

Before applying security changes, ensure the project compiles. After improvements, run full verification.

MANDATORY: Run ./mvnw compile or mvn compile before applying any change
SAFETY: If compilation fails, stop immediately
VERIFY: Run ./mvnw clean verify or mvn clean verify after applying improvements
BEFORE APPLYING: Read the reference for detailed rules and examples

When to use this skill

Add Micronaut security support
Review Micronaut security configuration
Improve API authorization in Micronaut
Add JWT security in Micronaut
Harden Micronaut route authorization rules
Implement @Secured policies in Micronaut controllers

Workflow

Read reference and assess project context

Read references/504-frameworks-micronaut-security.md and inspect the current project setup before proposing changes.

Gather scope and decide target improvements

Identify requested outcomes, constraints, and the minimum safe set of changes to apply.

Apply framework-aligned changes

Implement or refactor security-related configuration/code following the reference patterns and project conventions.

Run verification and report results

Execute appropriate build/tests and summarize what changed, what was verified, and any follow-up actions.

Reference

For detailed guidance, examples, and constraints, see references/504-frameworks-micronaut-security.md.

{ "ocm": "1", "id": "jabrena-plinth-504-frameworks-micronaut-security", "kind": "skill", "name": "504-frameworks-micronaut-security", "description": "Use when you need to design, review, or improve security in Micronaut applications — including micronaut-security authentication, @Secured and intercept-url-map rules, JWT/session strategies, SecurityService checks, CORS, CSRF awareness for browser apps, rejection handlers, and sensitive-data-safe logging. This should trigger for requests such as Add Micronaut security support; Review Micronaut security configuration; Improve API authorization in Micronaut; Add JWT security in Micronaut; Harden Micronaut route authorization rules. Part of Plinth Toolkit", "publisher": "jabrena", "version": "1.0.0", "capabilities": { "domains": [ "coding" ], "tags": [ "skill-md", "skills-sh" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Use when you need to design, review, or improve security in Micronaut applications — including micronaut-security authentication, @Secured and intercept-url-map rules, JWT/session strategies, SecurityService checks, CORS, CSRF awareness for browser apps, rejection handlers, and sensitive-data-safe logging. This should trigger for requests such as Add Micronaut security support; Review Micronaut security configuration; Improve API authorization in Micronaut; Add JWT security in Micronaut; Harden Micronaut route authorization rules. Part of Plinth Toolkit" ], "primary": false, "metadata": { "source": { "provider": "skills.sh", "repository": "https://github.com/jabrena/plinth", "path": "skills/504-frameworks-micronaut-security/SKILL.md", "ref": "HEAD", "url": "https://github.com/jabrena/plinth/blob/HEAD/skills/504-frameworks-micronaut-security/SKILL.md", "key": "jabrena/plinth/skills/504-frameworks-micronaut-security/SKILL.md" }, "license": "Apache-2.0" }, "instructions": "# Micronaut Security Guidelines\n\nApply Micronaut security best practices with secure-by-default API boundaries.\n\n**What is covered in this Skill?**\n\n- Micronaut security configuration and authentication setup\n- Authorization with @Secured and role-based policies\n- Endpoint and route protection strategy\n- Least-privilege design and policy boundaries\n- Secure error/denial behavior\n- Sensitive data handling in logs and responses\n\n**Scope:** Apply recommendations based on the reference rules and good/bad examples.\n\n## Constraints\n\nBefore applying security changes, ensure the project compiles. Afte", "cost": { "context_tokens": 503 } }

504-frameworks-micronaut-security

About

Micronaut Security Guidelines

Constraints

When to use this skill

Workflow

Reference

Use it

Manifest

Reviews