Help this project grow: Become a sponsor
An opinionated AI-native workflow for evolving modern Java Enterprise SDLC practices through reusable Skills, Agents, Commands & MCP servers.
A
plinthrepresents the solid foundation or platform used to support statues or artworks in art and sculpture. It served as a structural and symbolic foundation for columns, statues, and entire temple podiums. Romans inherited the idea from Greek architecture but expanded its use to emphasize monumentality, hierarchy, and imperial power.
- 13 Commands
- 9 Agents
- 125 Skills
Explore the latest published content on https://jabrena.github.io/plinth/ and follow its evolution through new skills, improvements, and fixes in the CHANGELOG.
Install every skill for your preferred agent:
npx skills add jabrena/plinth --skill '*' --agent cursor -y
npx skills add jabrena/plinth --skill '*' --agent claude-code -y
npx skills add jabrena/plinth --skill '*' --agent codex -y
npx skills add jabrena/plinth --skill '*' --agent github-copilot -yInstall every command for your prefered agent:
install @004-commands-installation cursor
install @004-commands-installation claude-code
install @004-commands-installation codex
install @004-commands-installation github-copilotInstall every agent for your prefered agent:
install @005-agents-installation cursor
install @005-agents-installation claude-code
install @005-agents-installation codex
install @005-agents-installation github-copilot
You can use the project in 2 ways:
- Use the AI-Native development workflow
- Refactor your code with Skills
Identify an issue in your Kanban dashboard from Atlasian Jira, Github Issues or Azure DevOps and apply the following workflow:
Issue
|
v
/update-issue --> /explore-problem --> /create-acceptance-criteria
|
v
/create-spec --> /explore-design
|
v
/implement-spec --> /close-spec
Turn an idea into an actionable change with user stories, GitHub Issues or Jira, ADRs, diagrams, AI plan mode, and OpenSpec.
Functional Specification:
| Command | Explanation |
|---|---|
/update-issue |
Update an existing GitHub or Jira issue with a structured user story, acceptance criteria, and resource content. |
/explore-problem |
Evaluate an issue from five perspectives and post a Functional Specification comment on the issue. |
/create-acceptance-criteria |
Derive Gherkin acceptance criteria from a Functional Specification and post them as a separate issue comment. |
Technical Specification:
| Command | Explanation |
|---|---|
/create-adr (Optional) |
Record an architectural decision, its alternatives, rationale, and consequences. |
/create-diagram (Optional) |
Create a focused architecture or design diagram from approved artifacts. |
/create-spec (OpenSpec) |
Create or update one or more validated OpenSpec changes. |
/explore-design |
Compare technical approaches and obtain an approved design direction. |
Implement and improve Java applications with Maven, design, coding, testing, security, documentation, Spring Boot, Quarkus, Micronaut, OpenAPI, and WireMock guidance.
| Command | Explanation |
|---|---|
/implement-spec |
Deliver an approved plan or validated OpenSpec task list through framework-aware delegation. |
/close-spec |
Archive an OpenSpec change by name using the OpenSpec CLI. |
Measure and improve production behavior through observability, profiling, benchmarking, and performance testing.
| Command | Explanation |
|---|---|
/profile |
Coordinate Java profiling from baseline detection through verified optimization. |
/benchmark |
Select and coordinate JMeter, Gatling, or JMH performance workflows. |
Review Java systems, AI models, and how GenAI tools are used across applications and delivery pipelines for regulation-aware engineering controls, evidence, and qualified owner handoffs spanning AI, data, security, product, platform, market, and governance. These skills support engineering awareness and do not provide legal advice.
| Regulation | Skill |
|---|---|
| EU AI Act | 801-regulations-eu-ai-act |
| DORA | 802-regulations-dora |
| GDPR | 803-regulations-gdpr |
| NIS2 | 804-regulations-eu-nis2 |
| Cyber Resilience Act | 805-regulations-eu-cyber-resilience-act |
| Data Act | 806-regulations-eu-data-act |
| Digital Services Act | 807-regulations-eu-digital-services-act |
| Digital Markets Act | 808-regulations-eu-digital-markets-act |
| MiFID II | 810-regulations-eu-mifid-ii |
| Market Abuse Regulation | 811-regulations-eu-market-abuse-regulation |
| Product Liability Directive | 812-regulations-eu-product-liability-directive |
Note: This set of skills could be a good complement for the future OWASP EU Compliance MCP.
Ask your agent:
Use @110-java-maven-best-practices to review this Maven project located in examples/@maven/maven-demo
Explain the findings, apply the approved improvements, and validate the build.
The skill guides the agent through a structured Maven review while keeping you in control of proposed changes.
Learn to use this project following the quick guide Getting Started in 5 minutes.
Explore the complete Commands, Agents, Skills, and MCP Servers inventories.
The project generates a set of deliverables at the end of any iteration.
| Inventory | Installation | Getting Started |
|---|---|---|
| 1. Commands | @004-commands-installation Install Commands in project |
Commands |
| 2. Agents | @005-agents-installation Install Agents in Cursor/Claude |
Agents |
| 3. Skills | npx skills add jabrena/plinth --skill '*' --agent cursor -y |
Skills |
This project is compatible with any tool that supports Commands, Agents, Skills, MCP Servers and AGENTS.md.
Every push runs the following validation checks in the Skill Scanners as part of the CI Pipeline to keep documentation and generated skills correct, consistent, and secure:
| Name | Purpose |
|---|---|
| 1. MarkdownValidator | Protects the documentation layer by catching Markdown parsing drift and remote link failures before skill-specific checks run. |
| 2. skill-check | Confirms every generated skill follows the expected packaging contract, complementing scanners that focus on behavior or security risk. |
| 3. cisco-ai-skill-scanner by Cisco | Adds behavior-oriented security coverage by looking for risky skill flows that structural validation cannot see. |
| 4. SkillSpector by NVIDIA | Provides an independent static quality and security review, useful for comparing findings against the other scanners. |
| 5. Snyk Agent Scan by SNYK | Focuses on agent-skill supply-chain and prompt-risk signals, adding another security perspective alongside Cisco and SkillSpector. |
From the outset, be aware that results from interactions with these Skills and agents are not deterministic because of how the models behave, but you can mitigate that with clear goals and validation checkpoints.
Some interactive skills require Premium models for interactive use; otherwise they follow a fixed sequence of steps.
Models can generate code, but they cannot execute it against your local data. To bridge that gap, some Skills include scripts you run locally.
This project supports software engineering work; it does not replace engineering judgment. A software engineer must review, guide, and validate AI-generated decisions, code, and outcomes before they are used.
Use caution when a problem involves corporate databases or other sensitive organizational data. Before granting an AI-assisted workflow access, assess authorization, privacy, data leakage, retention, and unintended modification risks. Apply least-privilege access, human review, validation, and monitoring. See OWASP GenAI Data Security Risks & Mitigations 2026, and the new set of skills about EU regulation.
See CONTRIBUTING.md for ways to support and improve the project.
- Review the ADR index for the complete list.
Java uses JEPs (JDK Enhancement Proposals) to describe new language and platform features. This repository tracks which JEPs could improve the Skills and guidance here.
Talks, articles, reference links, skill portals, and related projects live in Project references.
Developed by humans with support from Cursor and Codex, with ❤️ from Madrid