How do I install the Cis Tomcat8 V110 2.6 skill?

Run npx skillmds@latest add cyberstrikeus/cis-tomcat8-v110-2-6 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Cis Tomcat8 V110 2.6 skill do?

Turn off TRACE (Scored) It is listed under Coding & Dev Tools on SkillMD.

Is Cis Tomcat8 V110 2.6 safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cis Tomcat8 V110 2.6?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cis Tomcat8 V110 2.6 free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Cis Tomcat8 V110 2.6?

cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cis Tomcat8 V110 2.6 by cyberstrikeus

Name: Cis Tomcat8 V110 2.6
Author: cyberstrikeus

File contents

Turn off TRACE (Scored)

Description

The HTTP TRACE verb provides debugging and diagnostics information for a given request.

Rationale

Diagnostic information, such as that found in the response to a TRACE request, often contains sensitive information which may useful to an attacker. By preventing Tomcat from providing this information, the risk of leaking sensitive information to a potential attacker is reduced.

Audit Procedure

Perform the following to determine if the server platform, as advertised in the HTTP Server header, has been changed:

Locate all Connector elements in $CATALINA_HOME/conf/server.xml.
Ensure each Connector does not have an allowTrace attribute or, if present, the allowTrace attribute is NOT set true.

Note: Perform the above for each application hosted within Tomcat. Per application instances of web.xml can be found at $CATALINA_HOME/webapps/<APP_NAME>/WEBINF/web.xml.

Remediation

Perform the following to prevent Tomcat from accepting a TRACE request. Set the allowTrace attribute for each Connector specified in $CATALINA_HOME/conf/server.xml to false.

<Connector ... allowTrace="false" />

Alternatively, ensure the allowTrace attribute is absent from each Connector specified in $CATALINA_HOME/conf/server.xml.

Default Value

Tomcat does not allow the TRACE HTTP verb by default. Tomcat will only allow TRACE if the allowTrace attribute is present and set to true.

References

CIS Controls

v7:

13.2 Remove Sensitive Data or Systems Not Regularly Accessed by Organization
- Remove sensitive data or systems not regularly accessed by the organization from the network. These systems shall only be used as stand alone systems (disconnected from the network) by the business unit needing to occasionally use the system or completely virtualized and powered off until needed.

Profile Applicability

Level 1

---name: cis-tomcat8-v110-2-6description: Turn off TRACE (Scored)---# Turn off TRACE (Scored)## DescriptionThe HTTP `TRACE` verb provides debugging and diagnostics information for a given request.## RationaleDiagnostic information, such as that found in the response to a `TRACE` request, often contains sensitive information which may useful to an attacker. By preventing Tomcat from providing this information, the risk of leaking sensitive information to a potential attacker is reduced.## Audit ProcedurePerform the following to determine if the server platform, as advertised in the HTTP Server header, has been changed:1. Locate all `Connector` elements in `$CATALINA_HOME/conf/server.xml`.2. Ensure each `Connector` does not have an `allowTrace` attribute or, if present, the `allowTrace` attribute is **NOT** set `true`.**Note:** Perform the above for each application hosted within Tomcat. Per application instances of `web.xml` can be found at `$CATALINA_HOME/webapps/<APP_NAME>/WEBINF/web.xml`.## RemediationPerform the following to prevent Tomcat from accepting a `TRACE` request. Set the `allowTrace` attribute for each `Connector` specified in `$CATALINA_HOME/conf/server.xml` to `false`.```xml<Connector ... allowTrace="false" />```Alternatively, ensure the `allowTrace` attribute is absent from each `Connector` specified in `$CATALINA_HOME/conf/server.xml`.## Default ValueTomcat does not allow the `TRACE` HTTP verb by default. Tomcat will only allow `TRACE` if the `allowTrace` attribute is present and set to `true`.## References1. https://tomcat.apache.org/tomcat-8.0-doc/config/http.html2. https://tomcat.apache.org/tomcat-8.5-doc/security-howto.html3. https://tomcat.apache.org/tomcat-8.0-doc/security-howto.html## CIS Controls**v7:**- 13.2 Remove Sensitive Data or Systems Not Regularly Accessed by Organization - Remove sensitive data or systems not regularly accessed by the organization from the network. These systems shall only be used as stand alone systems (disconnected from the network) by the business unit needing to occasionally use the system or completely virtualized and powered off until needed.## Profile Applicability- Level 1

Frequently asked questions

Cis Tomcat8 V110 2.6