Java Maven Secondary Analysis
Use this skill when the user wants a 二开分析报告 for a Java Maven project.
Supported input
- Java Maven ZIP archive
- GitLab repository URL with user-authorized SSH access
Goal
Inspect Java Maven projects for:
- 二开涉及多少类
- 模块分布
- controller/service/mapper/config 等层次分布
- 产品化 / 客户化 / 品牌化痕迹
- 侵入式改造和升级污染风险
Required output
Write a formal markdown report to business/.
Suggested filename:
business/<project-name>-二开分析报告-YYYY-MM-DD.md
Minimum scan scope
- root
pom.xml - module
pom.xml src/main/javasrc/main/resources- optional
src/test/java - scripts / SQL / CI / Docker / deploy files
Evidence rules
Each important finding should include file path, module, layer/category, keyword/snippet evidence, and risk explanation when possible.
Shared dependency
Use java-maven-common first when you need to normalize ZIP / GitLab input before analysis.
Bundled resources
scripts/scan_secondary_analysis.pytemplates/report.md