Java Maven Secondary Analysis

• Verdict: Advisory
• Analyzed: Apr 14, 2026, 8:46 AM
• Findings: 0
• Version: 1.0.0
• Hash: 3b9eaf557b189474f53112f815f66e84a9d5ede216f1aaa0051270e9eef390c2
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: java-maven-secondary-analysis Version: 1.0.0 The skill bundle is designed for analyzing Java Maven projects to identify secondary development (customization) traces. The core logic in `scripts/scan_secondary_analysis.py` performs local file system operations such as counting Java classes, identifying architectural layers, and searching for specific keywords (e.g., 'tenant', 'brand', 'custom') to generate a report. No evidence of data exfiltration, malicious execution, or prompt injection was found; the behavior is entirely consistent with the stated purpose.