Guidance for running GeoServer, an open-source server that publishes geographic data as web map services. It covers map formats, data sources, styling, security, and caching.

Use it to deploy GeoServer, connect databases or geographic files, publish map and feature services, apply SLD or other styles, configure user permissions, and manage tile caching.

It helps turn stored spatial data into web services that mapping applications can use, while keeping configuration and access controls organized.

geoserver — Skill for Claude Code and Codex by znlgis/opengis-skills

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo

git clone --depth 1 https://github.com/znlgis/opengis-skills

agentmods

npx agentmods add skills/znlgis/opengis-skills/geoserver

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/znlgis/opengis-skills/geoserver/github.svg)](https://agentmods.dev/skills/znlgis/opengis-skills/geoserver)

Your own site

<a href="https://agentmods.dev/skills/znlgis/opengis-skills/geoserver"><img src="https://agentmods.dev/badge/skills/znlgis/opengis-skills/geoserver/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/znlgis/opengis-skills/geoserver"><img src="https://agentmods.dev/badge/skills/znlgis/opengis-skills/geoserver.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 103 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 2,691 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 2 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

medium MCP Rug Pull · line 53
Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.

Fix: Pin the image: image:tag or image@sha256:abc123
medium Data Exfiltration · line 144
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00103	$0.02691
Opus 5.5	$0.00041	$0.01076
Sonnet 5.5	$0.00021	$0.00538
Haiku 4.5	$0.00010	$0.00269

Measured 6d ago against content hash a3c3fefa66fa, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

geoserver scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -fLO https://sourceforge.net/projects/geoserver/files/GeoServer/3.0.2/geoserver-3.0.2-bin.zip

gis/geoserver/SKILL.md · 233 lines

How it starts

The opening of the file, as written. The whole thing — 233 lines — stays where its author put it; the contents beside it link to each section on GitHub.

项目地址： https://github.com/geoserver/geoserver

官方文档： https://docs.geoserver.org/latest/en/user/

下载： https://geoserver.org/release/stable/

最新版本： 3.0.2（2026-10-19，安全修复版，生产应优先升级；官方下载）

运行环境： Java 17 或 21；3.0.2 内含 GeoTools 35.2、GeoWebCache 2.0.2

许可证： GPL-2.0

该 SKILL 关注 GeoServer 服务端运维与配置；REST API 自动化管理资源请配合 gis/geoserver-rest-api。

概述

GeoServer 提供：

OGC 服务：WMS、WMTS、WFS、WCS、WPS、CSW
矢量瓦片：Mapbox Vector Tiles（pbf）
样式：SLD、CSS、YSLD、MBStyle
数据源：PostGIS、Shapefile、GeoPackage、Oracle、SQL Server、ArcSDE、GeoTIFF、ImageMosaic、JP2、NetCDF
安全：基于角色的访问控制（RBAC）
管理：Web UI（端口 8080） + REST API

安装部署

前置：JDK

3.0.x 需要 Java 17 或 21；先 java -version 确认（低于 17 的 JVM 无法启动 3.x 分发包）。

二进制

curl -fLO https://sourceforge.net/projects/geoserver/files/GeoServer/3.0.2/geoserver-3.0.2-bin.zip
unzip geoserver-3.0.2-bin.zip && cd geoserver-3.0.2
sh bin/startup.sh         # http://localhost:8080/geoserver  (admin/geoserver)

Docker

docker run --name gs -p 8080:8080 \
  -e SKIP_DEMO_DATA=true \
  -e EXTRA_JAVA_OPTS="-Xms512m -Xmx2g" \
  -v $PWD/data:/opt/geoserver_data \
  docker.osgeo.org/geoserver:3.0.2

数据目录

GEOSERVER_DATA_DIR/
├── workspaces/<ws>/<store>/...
├── styles/
├── layergroups/
├── gwc/
└── security/

核心概念

概念	说明
Workspace	命名空间
Store	数据存储
Layer	图层（Store 资源 + 样式）
Style	渲染规则（SLD/CSS）
LayerGroup	图层组
GeoWebCache (GWC)	内置瓦片缓存

发布矢量图层（PostGIS）

创建 Workspace my_ws
添加 Store：选 PostGIS，填 host/db/user/pass
发布图层：选表 → 计算原始范围 → 设置 SRS
配置样式（默认 / SLD）
Layer Preview

访问 URL：

WMS  : /geoserver/my_ws/wms?service=WMS&version=1.1.0&request=GetMap&layers=my_ws:poi&srs=EPSG:4326&bbox=...&width=512&height=512&format=image/png
WMTS : /geoserver/gwc/service/wmts?...&LAYER=my_ws:poi&...
WFS  : /geoserver/my_ws/ows?service=WFS&version=2.0.0&request=GetFeature&typeNames=my_ws:poi&outputFormat=application/json
MVT  : /geoserver/gwc/service/wmts?...&FORMAT=application/vnd.mapbox-vector-tile

Read the full file on GitHub · 233 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

6d ago Changed · -5 lines · +47 tokens per session a3c3fefa66fa
12d ago Changed · +5 lines 0e266a7975d8
1mo ago Changed 352da81a77a1
1mo ago Changed 9f26d6287435
1mo ago Changed 35d92108db36
1mo ago First seen · 233 lines · 56 tokens per session scan A 8aa89190bc81

Subscribe to this mod's changes

geoserver is a skill published in the GitHub repository znlgis/opengis-skills (75 stars, last pushed 7d ago), licensed MIT. It adds 103 tokens to every session and 2,691 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Java Languages Security map ogc server wcs web wfs wms wmts wps

dart-docs

Use this skill whenever the user asks about Dart, the client-optimized language for fast apps on any platform. Covers the full Dart 3.12 documentation including language tour (variables, operators, built-in types, records, collections, generics, typedefs, type system, patterns, control flow, error handling, functions…

pledgeandgrow/pledge-skills · 333 tokens

java-affected-tests

Use before opening or updating an OpenMetadata PR that changes Java, a JSON schema, an index mapping, a SQL migration, seed data or a pom — PR CI no longer runs the Java integration tests (they run only in the merge queue) and the JavaUIIT/search-it suites run only nightly, so this selects the unit tests and…

open-metadata/OpenMetadata · 120 tokens

geoserver