AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Maven Code Graph

skill-auver-maven-code-graph-maven-code-graph · by auver

Query Maven dependency JARs — search for classes, get method signatures, find implementations. Like codegraph for your project's external dependencies. Use when you need to know method signatures or class details from compiled Maven libraries.

No reviews yet
0 installs
6 views
0.0% view→install

Install

$ agentstack add skill-auver-maven-code-graph-maven-code-graph

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-auver-maven-code-graph-maven-code-graph)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
28d ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Maven Code Graph? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

maven-code-graph — Maven 依赖代码图谱

像 codegraph 索引项目源码一样,maven-code-graph 索引当前项目的 Maven 依赖 JAR。

前置检查 — CLI 安装

每次激活本 skill 时,必须先执行以下检测:

which maven-code-graph 2>/dev/null || echo "NOT_INSTALLED"

如果输出 NOT_INSTALLED,自动执行:

npm install -g maven-code-graph

如果已安装,直接跳过。

何时使用

  • 编码时想知道某个外部依赖类的方法签名
  • 想查看接口/抽象类有哪些实现类
  • 想确认依赖 JAR 中某个类是否存在
  • 想看 -sources.jar 中的源码(或 Fernflower 反编译结果)

命令

首次使用 — 初始化

maven-code-graph init

解析当前项目 pom.xml,索引所有依赖的 JAR。后续 pom.xml 未变化时自动跳过。

搜索类

maven-code-graph search 

返回匹配的类全限定名、类型(class/interface/enum)以及来自哪个 artifact 的哪个版本。

查看类详情

# 方法签名(默认,javap 输出)
maven-code-graph class 

# 完整源码(优先 sources.jar,否则 Fernflower 反编译)
maven-code-graph class  --type source

# Javadoc
maven-code-graph class  --type docs

# 指定精确 artifact 版本
maven-code-graph class  --coordinate groupId:artifactId:version

查找实现类

maven-code-graph implementations 

查看索引状态

maven-code-graph status

注意事项

  • 必须在 Maven 项目目录下运行
  • 首次 init 需要 mvn 命令可用
  • 索引数据存储在 ~/.maven-codegraph/artifacts.db(全局共享)+ .maven-codegraph/state.json(每项目)
  • 项目 pom.xml 变化后,下次命令会自动增量索引

反编译(Fernflower)

不少 Maven 依赖自带 -sources.jar,不需要反编译。对于没有源码的 JAR,maven-code-graph 使用 Fernflower 自动反编译。

Fernflower 需要 JDK 21+。maven-code-graph 按以下顺序自动查找:

  1. FERNFLOWER_JAVA 环境变量(如果有指定路径)
  2. IDEA 自带的 JBR(如果已安装 IntelliJ IDEA)
  3. 系统 java(如果是 JDK 21+)

大多数开发者已安装 IDEA,开箱即用。没有 IDEA 也没有 JDK 21 的用户,可以设置 FERNFLOWER_JAVA 指向一个 JDK 21+ 的安装路径:

export FERNFLOWER_JAVA=/path/to/jdk21/bin/java

无源码的 JAR 无法反编译时(约 5% 的依赖),该类的方法索引会缺失,--type source 会降级为 javap 签名。

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.