How can i run findsecbugs rules in spotbugs?

Am i right?

./spotbugs -textui -pluginList /Users/xxx/Downloads/findsecbugs-plugin-1.11.0-SNAPSHOT.jar -home . -low -output ./aaa -progress -train ./bbb -sourcepath ~/Downloads/codez/test/My-Blog/ -debug -noClassOk -progress -auxclasspath ~/Downloads/codez/test/My-Blog/target/ -choosePlugins edu.umd.cs.findbugs.plugins.core

Description

BeanUtils is a library that is doing automatic mapping to Java object.
It can cause arm when the attack controls part of the list of properties being sets. BeanUtils does not blacklist properties like class, classloader or other objects that are likely to load arbitrary classes and possibly run code.

Code

import org.apache.commons.beanutils.BeanUtils;

public