Java — review checklists

Consumed by the review-code skill. When the java profile is active, every checklist in Always load is applied to the diff. There are no conditional entries for this profile.

Always load

• security-checklist.md — Java-specific security smells: input validation, deserialization, crypto misuse, secret handling, injection vectors, common JVM-ecosystem vulnerabilities.
• solid-checklist.md — SOLID design-principle smells expressed in Java: class responsibility, interface segregation, Liskov substitution, dependency inversion.
• code-quality-checklist.md — idiomatic Java quality signals: immutability, exception hygiene, collection usage, concurrency, maintainability.
• removal-plan.md — staged-removal template for Java code being retired (classes, packages, public APIs).