How do I install the Cis Tomcat8 V100 9.2 skill?

Run npx skillmds@latest add cyberstrikeus/cis-tomcat8-v100-9-2 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Cis Tomcat8 V100 9.2 skill do?

Disable deploy on startup of applications (Automated) It is listed under DevOps & Infra on SkillMD.

Is Cis Tomcat8 V100 9.2 safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cis Tomcat8 V100 9.2?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cis Tomcat8 V100 9.2 free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Cis Tomcat8 V100 9.2?

cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cis Tomcat8 V100 9.2 by cyberstrikeus

Name: Cis Tomcat8 V100 9.2
Author: cyberstrikeus

File contents

9.2 Disable deploy on startup of applications (Automated)

Description

Tomcat allows auto deployment of applications on startup. It is recommended that this capability be disabled.

Rationale

This could allow malicious or untested applications to be deployed and should be disabled.

Audit Procedure

Perform the following to ensure deployOnStartup is set to false.

# grep "deployOnStartup" $CATALINA_HOME/conf/server.xml

Remediation

In the $CATALINA_HOME/conf/server.xml file, change deployOnStartup to false.

deployOnStartup="false"

Default Value

deployOnStartup is set to true.

References

CIS Controls

Controls Version	Control	IG 1	IG 2	IG 3
v8	4 Secure Configuration of Enterprise Assets and SoftwareEstablish and maintain the secure configuration of enterprise assets (end-user devices, including portable and mobile; network devices; non-computing/IoT devices; and servers) and software (operating systems and applications).
v7	5.1 Establish Secure ConfigurationsMaintain documented, standard security configuration standards for all authorized operating systems and software.	●	●	●

Profile

Level 2

---name: cis-tomcat8-v100-9-2description: Disable deploy on startup of applications (Automated)---# 9.2 Disable deploy on startup of applications (Automated)## DescriptionTomcat allows auto deployment of applications on startup. It is recommended that this capability be disabled.## RationaleThis could allow malicious or untested applications to be deployed and should be disabled.## Audit ProcedurePerform the following to ensure `deployOnStartup` is set to `false`.```# grep "deployOnStartup" $CATALINA_HOME/conf/server.xml```## RemediationIn the `$CATALINA_HOME/conf/server.xml` file, change `deployOnStartup` to `false`.```deployOnStartup="false"```## Default Value`deployOnStartup` is set to `true`.## References1. https://tomcat.apache.org/tomcat-9.0-doc/deployer-howto.html#Deployment_on_Tomcat_startup2. https://tomcat.apache.org/tomcat-9.0-doc/config/host.html#Automatic_Application_Deployment## CIS Controls| Controls Version | Control | IG 1 | IG 2 | IG 3 || ---------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---- | ---- | ---- || v8 | 4 Secure Configuration of Enterprise Assets and Software<br>Establish and maintain the secure configuration of enterprise assets (end-user devices, including portable and mobile; network devices; non-computing/IoT devices; and servers) and software (operating systems and applications). | | | || v7 | 5.1 Establish Secure Configurations<br>Maintain documented, standard security configuration standards for all authorized operating systems and software. | ● | ● | ● |## ProfileLevel 2

Frequently asked questions

Cis Tomcat8 V100 9.2