Source profileQuality 94/100

gaelic-ghost/socket/plugins/server-side-jvm/skills/build-tooling-workflow/SKILL.md

build-tooling-workflow

Inspect and maintain server-side JVM build tooling across Gradle, Maven, and SBT, including wrapper policy, Java toolchains, dependencies, multi-module boundaries, local run commands, tests, package tasks, and machine-local dependency guardrails.

Source repository stars
6
Declared platforms
1
Static risk flags
0
Last source update
2026-08-21
Source checked
2026-08-25

Decision brief

What it does: where it fits

Inspect and maintain server-side JVM build tooling across Gradle, Maven, and SBT, including wrapper policy, Java toolchains, dependencies, multi-module boundaries, local run commands, tests, package tasks, and machine-local dependency guardrails.

Best for

  • Use this skill when a JVM backend task touches Gradle, Maven, SBT, Java versions, dependencies, modules, package tasks, or local run commands.
  • Use this skill before adding dependencies or changing build files.
  • Use this skill when build failures need phase-aware triage.

Not for

  • Tasks that require unconfirmed production actions or broad system permissions.
  • Environments where the pinned source and install steps cannot be inspected.

Compatibility matrix

Platform support, with evidence labels

PlatformStatusEvidenceWhat to check
CodexDeclaredSource recordInstall path and trigger
Claude CodeNot declaredNo explicit evidencePortability before use
CursorNot declaredNo explicit evidencePortability before use
Gemini CLINot declaredNo explicit evidencePortability before use
Open the compatibility checker

Installation

Inspect first. Install second.

The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.

Source-detected install commandSource
npx skills add https://github.com/gaelic-ghost/socket --skill "plugins/server-side-jvm/skills/build-tooling-workflow"
Safe inspection promptEditorial

Inspect the Agent Skill "build-tooling-workflow" from https://github.com/gaelic-ghost/socket/blob/1140bc0b60f2c938b81d67dcee88a5eeb2e2f39d/plugins/server-side-jvm/skills/build-tooling-workflow/SKILL.md at commit 1140bc0b60f2c938b81d67dcee88a5eeb2e2f39d. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.

Workflow

What the source asks the agent to do

  1. 01

    Inspection Workflow

    1. Identify the build owner: - Gradle: settings.gradle, settings.gradle.kts, build.gradle, build.gradle.kts, gradlew - Maven: pom.xml, .mvn/ - SBT: build.sbt, project/.scala, project/.sbt 2. Prefer repository wrappers: - use ./gradlew when present - use ./mvnw when present - use…

    Identify the build owner:Gradle: settings.gradle, settings.gradle.kts, build.gradle, build.gradle.kts, gradlewMaven: pom.xml, .mvn/
  2. 02

    Purpose

    Keep JVM build and dependency work grounded in the repository's real build tool.

    Keep JVM build and dependency work grounded in the repository's real build tool.The practical decision is which tool owns the project, which wrapper or pinned toolchain should be used, which module is affected, and which command proves the change without relying on machine-global state.
  3. 03

    When To Use

    Use this skill when a JVM backend task touches Gradle, Maven, SBT, Java versions, dependencies, modules, package tasks, or local run commands.

    Use this skill when a JVM backend task touches Gradle, Maven, SBT, Java versions, dependencies, modules, package tasks, or local run commands.Use this skill before adding dependencies or changing build files.Use this skill when build failures need phase-aware triage.
  4. 04

    Source Check

    Use repo-local build files, checked-out dependency sources, Dash MCP or Dash HTTP for installed build-tool docsets, and then official build tool documentation when Dash/local coverage is missing or stale:

    Gradle User ManualGradle Toolchains for JVM projectsMaven documentation
  5. 05

    Command Selection

    Choose the narrowest useful command first:

    Gradle compile: ./gradlew :module:classesGradle test: ./gradlew :module:testGradle full verification: ./gradlew test

Permission review

Static risk signals and limitations

No configured static risk pattern was detected

This is not proof of safety. Runtime behavior, indirect dependencies, and hidden external systems are outside the static scan.

Evidence record

Why each signal appears

EvidenceSourceComputedTestedEditorial
SignalValueEvidence typeMeaning
Quality score94/100ComputedDocumentation, specificity, maintenance, and trust rules
Repository stars6SourceRepository attention, not individual Skill quality
Compatibility1 platformsSourceDeclared in the catalog source record
Usage guideautomated source guideEditorialGenerated or reviewed according to the visible evidence level

Pinned source

Provenance and original SKILL.md

Repository
gaelic-ghost/socket
Skill path
plugins/server-side-jvm/skills/build-tooling-workflow/SKILL.md
Commit
1140bc0b60f2c938b81d67dcee88a5eeb2e2f39d
License
Apache-2.0
Collected
2026-08-25
Default branch
main
View the original SKILL.md

JVM Build Tooling Workflow

Purpose

Keep JVM build and dependency work grounded in the repository's real build tool.

The practical decision is which tool owns the project, which wrapper or pinned toolchain should be used, which module is affected, and which command proves the change without relying on machine-global state.

When To Use

  • Use this skill when a JVM backend task touches Gradle, Maven, SBT, Java versions, dependencies, modules, package tasks, or local run commands.
  • Use this skill before adding dependencies or changing build files.
  • Use this skill when build failures need phase-aware triage.
  • Use this skill when the repository shape is unclear and choose-service-shape identified build tooling as the next owner.

Source Check

Use repo-local build files, checked-out dependency sources, Dash MCP or Dash HTTP for installed build-tool docsets, and then official build tool documentation when Dash/local coverage is missing or stale:

Translate documentation rules into concrete build-file, command, or module decisions.

Inspection Workflow

  1. Identify the build owner:
    • Gradle: settings.gradle, settings.gradle.kts, build.gradle, build.gradle.kts, gradlew
    • Maven: pom.xml, .mvn/
    • SBT: build.sbt, project/*.scala, project/*.sbt
  2. Prefer repository wrappers:
    • use ./gradlew when present
    • use ./mvnw when present
    • use sbt only after checking for repo-local launcher conventions
  3. Inspect Java/toolchain policy:
    • Gradle Java toolchains
    • Maven compiler release/source/target
    • SBT javacOptions, scalacOptions, ThisBuild / scalaVersion, and JVM settings
    • .java-version, .sdkmanrc, .tool-versions, or CI setup
  4. Inspect dependencies:
    • Gradle version catalogs, platforms, constraints, and repositories
    • Maven dependency management, parent POMs, profiles, and repositories
    • SBT library dependencies, plugins, resolvers, and cross-versioning
  5. Inspect module boundaries:
    • Gradle subprojects
    • Maven modules
    • SBT projects
    • Java/Scala source sets
    • shared JVM libraries versus Android modules

Command Selection

Choose the narrowest useful command first:

  • Gradle compile: ./gradlew :module:classes
  • Gradle test: ./gradlew :module:test
  • Gradle full verification: ./gradlew test
  • Maven compile: mvn -pl module -am test-compile
  • Maven test: mvn -pl module -am test
  • Maven full verification: mvn test
  • SBT compile: sbt module/compile
  • SBT test: sbt module/test
  • SBT full verification: sbt test

Use the repository's documented commands when they differ.

Dependency Rules

  • Use fetchable package repositories or source repositories only.
  • Do not commit machine-local paths, local Maven repositories, local Ivy caches, unpublished local jars, or absolute paths.
  • Preserve existing version catalog, dependency management, or plugin-management patterns.
  • Add a new dependency only when it removes real complexity or matches an existing repo pattern.
  • Keep dependency updates separate from feature work when the update has broad risk.

Failure Triage

Classify failures by phase:

  • toolchain selection
  • dependency resolution
  • compile
  • annotation processing or code generation
  • test discovery
  • test execution
  • package or artifact creation

Report the command, module, phase, first meaningful error, likely cause, and smallest next check.

Output Shape

Return:

  1. Build owner: Gradle, Maven, SBT, and wrapper command.
  2. Affected modules: module or project names.
  3. Toolchain policy: Java, Scala, and plugin version constraints.
  4. Dependency decision: add, update, preserve, or remove.
  5. Validation path: exact commands.
  6. Risk: build, dependency, generated-source, or cross-module risks.

Guardrails

  • Do not mix Gradle, Maven, and SBT commands speculatively.
  • Do not run multiple build or test commands concurrently.
  • Do not add machine-local dependency paths.
  • Do not change Java, Scala, Gradle, Maven, or SBT versions without explaining the compatibility impact.
  • Do not make backend build decisions inside Android-owned modules unless the task is explicitly about a shared non-Android JVM library.

Frequently asked questions

What to verify before installation and use

What does the build-tooling-workflow source document cover?

Inspect and maintain server-side JVM build tooling across Gradle, Maven, and SBT, including wrapper policy, Java toolchains, dependencies, multi-module boundaries, local run commands, tests, package tasks, and machine-local dependency guardrails.

How do I install build-tooling-workflow?

The source record exposes this install command: npx skills add https://github.com/gaelic-ghost/socket --skill "plugins/server-side-jvm/skills/build-tooling-workflow". Inspect the command and pinned source before running it.

Which Agent platforms does the source record declare?

The pinned source record declares support for: codex.

Alternatives

Compare before choosing