maven-cve-strategy

What problem does it solve?

This skill translates CVE research into actionable fix strategies tailored to a specific Maven project. There are multiple valid ways to fix most Maven vulnerabilities — and the right choice depends on the project's dependency structure, the team's risk tolerance, and whether the dependency is public or private. Choosing the wrong strategy leads to version conflicts, broken builds, or incomplete fixes.

Core Features & Use Cases

• Detect Private/Custom Dependencies and identify whether the vulnerable artifact is private or custom
• Present applicable fix strategies with risk assessments
• Capture the user's preferred approach and outline concrete execution steps
• Provide guidance on how to validate the fix with dependency:tree and build verification

Quick Start

Use the maven-cve-strategy skill to determine the best remediation strategy for a given Maven project.