tomcat-expert
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and operational guide for Apache Tomcat administration. All provided instructions, including shell commands and configuration snippets, align with the legitimate purpose of managing a server environment.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download Apache Tomcat binaries from the official Apache Software Foundation distribution mirrors (e.g.,
downloads.apache.org). These are trusted sources for the software. - [COMMAND_EXECUTION]: Instructions include standard system administration commands for service management (e.g.,
systemctl), user management (e.g.,useradd), and file permissions (e.g.,chmod,chown). These operations are necessary for setting up a production-ready Tomcat environment and are documented with security in mind (e.g., recommending a non-root user). - [CREDENTIALS_UNSAFE]: The documentation includes configuration examples for
server.xmlandtomcat-users.xmlcontaining placeholder credentials (e.g.,password="s3cr3t"orsecret="your_secret_here"). These are standard placeholders for instructional purposes and do not represent a credential leak.
Audit Metadata