OpenAgentSkill Registry Manifest
Skill: Log4j Detector
Slug: mergebase-log4j-detector
Category: security
Description: A public open sourced tool.  Log4J scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046, etc) on your file-system within any application. It is able to even find Log4J instances that are hidden several layers deep. Works on Linux, Windows, and Mac, and everywhere else Java runs, too!  TAG_OS_TOOL, OWNER_KELLY, DC_PUBLIC

Agent fit:
- Decision: 51/100 Needs manual review
- Primary fit: Workflow automation
- Role: Needs validation

Supply profile:
- Track: Coding and developer agents
- Scenario: Coding agents
- Applicable agents: Claude Code, CLI, Codex, Cursor, Java
- Maintenance: 4y since push
- Risk: Needs review

Trust:
- Trust score: 72/100 Strong shortlist
- Audit: 62/100 Needs review

Attribution:
- Status: Community indexed
- Source: GitHub star discovery
- Creator: mergebase
- Claim URL: https://www.openagentskill.com/skills/mergebase-log4j-detector#claim-this-skill

Install:
npx skills add mergebase/log4j-detector

URLs:
- Web: https://www.openagentskill.com/skills/mergebase-log4j-detector
- API: https://www.openagentskill.com/api/agent/skills/mergebase-log4j-detector
- Install API: https://www.openagentskill.com/api/skills/mergebase-log4j-detector/install
- Repository: https://github.com/mergebase/log4j-detector