How long does the integration take?

Change one base URL in an OpenAI-compatible client, or install the Python or TypeScript SDK; the quickstart routes a first request in a few minutes.

Will this lock us into another vendor?

No. The router is Apache-2.0 open source, your provider keys stay yours, and the API is OpenAI-compatible, so leaving is a change of base URL.

What happens when a provider fails?

The router falls back to the next model your policy allows and records the fallback in the trace, so an outage costs a retry, not an incident.

cis-tomcat10-v110-1.1 - Skill

Name: cis-tomcat10-v110-1.1
Author: CyberStrikeus

Imported from CyberStrikeus/CyberStrike (.cyberstrike/skill/CIS_benchmarks/Server_Software/Apache_Tomcat/CIS_Apache_Tomcat_10_Benchmark_v1.1.0/cis-tomcat10-v110-1.1/SKILL.md). Install upstream with npx skills add CyberStrikeus/CyberStrike --skill cis-tomcat10-v110-1.1. Copyright stays with the author.

Remove extraneous files and directories (Manual)

Description

The installation may provide example applications, documentation, and other directories which may not serve a production use.

Rationale

Removing sample resources is a defense in depth measure that reduces potential exposures introduced by these resources.

Audit Procedure

Perform the following to determine the existence of extraneous resources:

$ ls -l $CATALINA_HOME/webapps/examples \
    $CATALINA_HOME/webapps/docs \
    $CATALINA_HOME/webapps/ROOT \
    $CATALINA_HOME/webapps/host-manager \
    $CATALINA_HOME/webapps/manager

No output implies no sample resources are present.

Remediation

Perform the following to remove extraneous resources:

$ rm -rf $CATALINA_HOME/webapps/docs \
    $CATALINA_HOME/webapps/examples \
    $CATALINA_HOME/webapps/ROOT

If the Manager and HOST-Manager application are not utilized, also remove the following resources:

$ rm -rf $CATALINA_HOME/webapps/host-manager \
    $CATALINA_HOME/webapps/manager

Default Value

docs, examples, ROOT, manager and host-manager are default web applications shipped with Tomcat.

References

https://tomcat.apache.org/tomcat-9.0-doc/security-howto.html#Default_web_applications/General

CIS Controls

v8:

4.8 Uninstall or Disable Unnecessary Services on Enterprise Assets and Software
- Uninstall or disable unnecessary services on enterprise assets and software, such as an unused file sharing service, web application module, or service function.

v7:

2.6 Address unapproved software
- Ensure that unauthorized software is either removed or the inventory is updated in a timely manner

Profile Applicability

Level 2

Install cis-tomcat10-v110-1.1 and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "cyberstrikeus-cyberstrike-cis-tomcat10-v110-1-1", "kind": "skill", "name": "cis-tomcat10-v110-1.1", "description": "Remove extraneous files and directories (Manual)", "publisher": "CyberStrikeus", "version": "1.0.0", "capabilities": { "domains": [ "general" ], "tags": [ "skill-md", "cis", "tomcat", "linux", "java", "cleanup", "github" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Remove extraneous files and directories (Manual)" ], "primary": false, "metadata": { "source": { "provider": "github", "repository": "https://github.com/CyberStrikeus/CyberStrike", "path": ".cyberstrike/skill/CIS_benchmarks/Server_Software/Apache_Tomcat/CIS_Apache_Tomcat_10_Benchmark_v1.1.0/cis-tomcat10-v110-1.1/SKILL.md", "ref": "df28ccd3dc6d6c02391169121ee2dcdf4a6a132b", "url": "https://github.com/CyberStrikeus/CyberStrike/blob/df28ccd3dc6d6c02391169121ee2dcdf4a6a132b/.cyberstrike/skill/CIS_benchmarks/Server_Software/Apache_Tomcat/CIS_Apache_Tomcat_10_Benchmark_v1.1.0/cis-tomcat10-v110-1.1/SKILL.md", "key": "CyberStrikeus/CyberStrike/.cyberstrike/skill/CIS_benchmarks/Server_Software/Apache_Tomcat/CIS_Apache_Tomcat_10_Benchmark_v1.1.0/cis-tomcat10-v110-1.1/SKILL.md" } }, "instructions": "# Remove extraneous files and directories (Manual)\n\n## Description\n\nThe installation may provide example applications, documentation, and other directories which may not serve a production use.\n\n## Rationale\n\nRemoving sample resources is a defense in depth measure that reduces potential exposures introduced by these resources.\n\n## Audit Procedure\n\nPerform the following to determine the existence of extraneous resources:\n\n```bash\n$ ls -l $CATALINA_HOME/webapps/examples \\\n $CATALINA_HOME/webapps/docs \\\n $CATALINA_HOME/webapps/ROOT \\\n $CATALINA_HOME/webapps/host-manager \\\n $CATALINA_H", "cost": { "context_tokens": 440 } }

cis-tomcat10-v110-1.1

About

Remove extraneous files and directories (Manual)

Description

Rationale

Audit Procedure

Remediation

Default Value

References

CIS Controls

Profile Applicability

Install cis-tomcat10-v110-1.1 and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Use it

Manifest

Reviews