How do I install the Cis Tomcat8 V110 10.4 skill?

Run npx skillmds@latest add cyberstrikeus/cis-tomcat8-v110-10-4 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Cis Tomcat8 V110 10.4 skill do?

Force SSL when accessing the manager application via HTTP (Manual) It is listed under Coding & Dev Tools on SkillMD.

Is Cis Tomcat8 V110 10.4 safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cis Tomcat8 V110 10.4?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cis Tomcat8 V110 10.4 free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Cis Tomcat8 V110 10.4?

cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cis Tomcat8 V110 10.4 by cyberstrikeus

Name: Cis Tomcat8 V110 10.4
Rating: 4.2 (5 reviews)
Author: cyberstrikeus

File contents

10.4 Force SSL when accessing the manager application via HTTP (Manual)

Description

Use the transport-guarantee attribute to ensure SSL protection when accessing the manager application.

Rationale

By default when accessing the manager application via HTTP, login information is sent over the wire in plain text. By setting the transport-guarantee within web.xml, SSL is enforced.

Note: This requires SSL to be configured.

Audit Procedure

Ensure $CATALINA_HOME/webapps/manager/WEB-INF/web.xml has the <transport-guarantee> set to CONFIDENTIAL.

# grep transport-guarantee $CATALINA_HOME/webapps/manager/WEB-INF/web.xml

Remediation

Set <transport-guarantee> to CONFIDENTIAL in $CATALINA_HOME/webapps/manager/WEB-INF/web.xml:

<security-constraint>
  <user-data-constraint>
    <transport-guarantee>CONFIDENTIAL</transport-guarantee>
  </user-data-constraint>
</security-constraint>

Default Value

By default this configuration is not present.

References

https://www.owasp.org/index.php/Securing_tomcat

CIS Controls

Controls Version	Control	IG 1	IG 2	IG 3
v8	3.10 Encrypt Sensitive Data in TransitEncrypt sensitive data in transit. Example implementations can include: Transport Layer Security (TLS) and Open Secure Shell (OpenSSH).		●	●
v7	14.4 Encrypt All Sensitive Information in TransitEncrypt all sensitive information in transit.		●	●

Profile

Level 1

---name: cis-tomcat8-v110-10-4description: Force SSL when accessing the manager application via HTTP (Manual)---# 10.4 Force SSL when accessing the manager application via HTTP (Manual)## DescriptionUse the transport-guarantee attribute to ensure SSL protection when accessing the manager application.## RationaleBy default when accessing the manager application via HTTP, login information is sent over the wire in plain text. By setting the transport-guarantee within `web.xml`, SSL is enforced.Note: This requires SSL to be configured.## Audit ProcedureEnsure `$CATALINA_HOME/webapps/manager/WEB-INF/web.xml` has the `<transport-guarantee>` set to `CONFIDENTIAL`.```# grep transport-guarantee $CATALINA_HOME/webapps/manager/WEB-INF/web.xml```## RemediationSet `<transport-guarantee>` to `CONFIDENTIAL` in `$CATALINA_HOME/webapps/manager/WEB-INF/web.xml`:```xml<security-constraint> <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint></security-constraint>```## Default ValueBy default this configuration is not present.## References1. https://www.owasp.org/index.php/Securing_tomcat## CIS Controls| Controls Version | Control | IG 1 | IG 2 | IG 3 || ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---- | ---- | ---- || v8 | 3.10 Encrypt Sensitive Data in Transit<br>Encrypt sensitive data in transit. Example implementations can include: Transport Layer Security (TLS) and Open Secure Shell (OpenSSH). | | ● | ● || v7 | 14.4 Encrypt All Sensitive Information in Transit<br>Encrypt all sensitive information in transit. | | ● | ● |## ProfileLevel 1

Frequently asked questions

Cis Tomcat8 V110 10.4