tomcat-expert

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as an educational and operational guide for Apache Tomcat administration. All provided instructions, including shell commands and configuration snippets, align with the legitimate purpose of managing a server environment.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download Apache Tomcat binaries from the official Apache Software Foundation distribution mirrors (e.g., downloads.apache.org). These are trusted sources for the software.
  • [COMMAND_EXECUTION]: Instructions include standard system administration commands for service management (e.g., systemctl), user management (e.g., useradd), and file permissions (e.g., chmod, chown). These operations are necessary for setting up a production-ready Tomcat environment and are documented with security in mind (e.g., recommending a non-root user).
  • [CREDENTIALS_UNSAFE]: The documentation includes configuration examples for server.xml and tomcat-users.xml containing placeholder credentials (e.g., password="s3cr3t" or secret="your_secret_here"). These are standard placeholders for instructional purposes and do not represent a credential leak.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 11:27 AM
Security Audit — agent-trust-hub — tomcat-expert