360 Secure SkillHub
360 安全技能中心

Java Maven Common

该技能是 Java Maven 审查流程的共享输入层：支持从 ZIP 压缩包解压或经用户确认 SSH 授权后克隆 GitLab 仓库，将项目放入 temp 下的独立工作目录，规范化项目根目录，并扫描 pom.xml 识别 Maven 根与子模块，最终输出含输入模式、根路径、项目名、模块列表、模块数量及扫描是否受限的 JSON 摘要，本身不产出业务报告。

mrliugangqiang
mrliugangqiang
热度 35.17
最近更新 2026-05-11 17:43:03
分类：开发依赖：代码执行 / 读写文件应用场景：工作流 / 自动化脚本

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add java-maven-common
Metadata
name
java-maven-common
description
Common input handling for Java Maven project review workflows. Use when a Java Maven project arrives as a ZIP archive or a GitLab repository URL and you need to unpack, clone, normalize the project root, and identify Maven modules before deeper review or analysis.

Java Maven Common

Use this skill as the shared input layer for Java Maven review work.

Purpose

This skill handles the common project-ingest steps used by other Java Maven skills:

  • ZIP unpack
  • GitLab clone after SSH authorization
  • project root normalization
  • Maven root/module identification

Supported input

  • Java Maven ZIP archive
  • GitLab repository URL

Standard workflow

ZIP input

  1. Put archive into temp/
  2. Unpack into a dedicated work directory under temp/
  3. Normalize root directory
  4. Detect Maven modules by scanning pom.xml

GitLab input

  1. Confirm SSH authorization has been granted by the user
  2. Clone repository into a dedicated work directory under temp/
  3. Normalize root directory
  4. Detect Maven modules by scanning pom.xml

Output

Generate a JSON summary that includes at least:

  • input mode
  • normalized root path
  • project name
  • module list
  • module count
  • whether scan is limited

Bundled resources

  • scripts/prepare_java_maven_project.py

Instruction scope

This skill does not produce the final business report by itself. It prepares the project input for downstream skills.