How do I install the Cis Tomcat9 V120 9.3 skill?

Run npx skillmds@latest add cyberstrikeus/cis-tomcat9-v120-9-3 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Cis Tomcat9 V120 9.3 skill do?

Disable deploy on startup of applications (Automated) It is listed under DevOps & Infra on SkillMD.

Is Cis Tomcat9 V120 9.3 safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: CAUTION, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cis Tomcat9 V120 9.3?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cis Tomcat9 V120 9.3 free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Cis Tomcat9 V120 9.3?

cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cis Tomcat9 V120 9.3 by cyberstrikeus

Name: Cis Tomcat9 V120 9.3
Author: cyberstrikeus

File contents

9.3 Disable deploy on startup of applications (Automated)

Description

Tomcat allows auto deployment of applications on startup. It is recommended that this capability be disabled.

Rationale

This could allow malicious or untested applications to be deployed and should be disabled.

Audit Procedure

Perform the following to ensure deployOnStartup is set to false.

$ grep "deployOnStartup" $CATALINA_HOME/conf/server.xml

Remediation

In the $CATALINA_HOME/conf/server.xml file, change deployOnStartup to false.

<Host name="localhost" appBase="webapps"
      unpackWARs="true" autoDeploy="false"
      deployOnStartup="false">

Default Value

deployOnStartup is set to true.

References

CIS Controls

Controls Version	Control	IG 1	IG 2	IG 3
v8	4 Secure Configuration of Enterprise Assets and SoftwareEstablish and maintain the secure configuration of enterprise assets (end-user devices, including portable and mobile; network devices; non-computing/IoT devices; and servers) and software (operating systems and applications).
v7	5.1 Establish Secure ConfigurationsMaintain documented, standard security configuration standards for all authorized operating systems and software.	●	●	●

Profile Applicability

Level 2

---name: cis-tomcat9-v120-9-3description: Disable deploy on startup of applications (Automated)---# 9.3 Disable deploy on startup of applications (Automated)## DescriptionTomcat allows auto deployment of applications on startup. It is recommended that this capability be disabled.## RationaleThis could allow malicious or untested applications to be deployed and should be disabled.## Audit ProcedurePerform the following to ensure `deployOnStartup` is set to `false`.```bash$ grep "deployOnStartup" $CATALINA_HOME/conf/server.xml```## RemediationIn the `$CATALINA_HOME/conf/server.xml` file, change `deployOnStartup` to `false`.```xml<Host name="localhost" appBase="webapps" unpackWARs="true" autoDeploy="false" deployOnStartup="false">```## Default Value`deployOnStartup` is set to `true`.## References1. https://tomcat.apache.org/tomcat-9.0-doc/deployer-howto.html#Deployment_on_Tomcat_startup2. https://tomcat.apache.org/tomcat-9.0-doc/config/host.html#Automatic_Application_Deployment## CIS Controls| Controls Version | Control | IG 1 | IG 2 | IG 3 || ---------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---- | ---- | ---- || v8 | 4 Secure Configuration of Enterprise Assets and Software<br>Establish and maintain the secure configuration of enterprise assets (end-user devices, including portable and mobile; network devices; non-computing/IoT devices; and servers) and software (operating systems and applications). | | | || v7 | 5.1 Establish Secure Configurations<br>Maintain documented, standard security configuration standards for all authorized operating systems and software. | ● | ● | ● |## Profile Applicability- Level 2

Frequently asked questions

Cis Tomcat9 V120 9.3