Guidance for running GeoServer, an open-source server that publishes geographic data as web map services. It covers map formats, data sources, styling, security, and caching.

Use it to deploy GeoServer, connect databases or geographic files, publish map and feature services, apply SLD or other styles, configure user permissions, and manage tile caching.

It helps turn stored spatial data into web services that mapping applications can use, while keeping configuration and access controls organized.

geoserver — Skill for Claude Code and Codex by znlgis

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo

git clone --depth 1 https://github.com/znlgis/opengis-skills

agentmods

npx agentmods add skills/znlgis/opengis-skills/geoserver

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/znlgis/opengis-skills/geoserver/github.svg)](https://agentmods.dev/skills/znlgis/opengis-skills/geoserver)

Your own site

<a href="https://agentmods.dev/skills/znlgis/opengis-skills/geoserver"><img src="https://agentmods.dev/badge/skills/znlgis/opengis-skills/geoserver/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/znlgis/opengis-skills/geoserver"><img src="https://agentmods.dev/badge/skills/znlgis/opengis-skills/geoserver.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 56 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 2,246 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 2 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

medium MCP Rug Pull · line 53
Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.

Fix: Pin the image: image:tag or image@sha256:abc123
medium Data Exfiltration · line 144
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00056	$0.02246
Opus 5	$0.00028	$0.01123
Sonnet 5	$0.00011	$0.00449
Haiku 4.5	$0.00006	$0.00225

Measured 2d ago against content hash 9f26d6287435, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

geoserver scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

wget https://sourceforge.net/projects/geoserver/files/GeoServer/3.0.1/geoserver-3.0.1-bin.zip

gis/geoserver/SKILL.md · 233 lines

How it starts

The opening of the file, as written. The whole thing — 233 lines — stays where its author put it; the contents beside it link to each section on GitHub.

项目地址： https://github.com/geoserver/geoserver

官方文档： https://docs.geoserver.org/latest/en/user/

下载： https://geoserver.org/release/stable/

许可证： GPL-2.0

该 SKILL 关注 GeoServer 服务端运维与配置；REST 自动化管理资源请配合 gis/geoserver-rest-api。

概述

GeoServer 提供：

OGC 服务：WMS、WMTS、WFS、WCS、WPS、CSW
矢量瓦片：Mapbox Vector Tiles（pbf）
样式：SLD、CSS、YSLD、MBStyle
数据源：PostGIS、Shapefile、GeoPackage、Oracle、SQL Server、ArcSDE、GeoTIFF、ImageMosaic、JP2、NetCDF
安全：基于角色的访问控制（RBAC）
管理：Web UI（端口 8080） + REST API

部署

二进制

wget https://sourceforge.net/projects/geoserver/files/GeoServer/3.0.1/geoserver-3.0.1-bin.zip
unzip geoserver-3.0.1-bin.zip && cd geoserver-3.0.1
sh bin/startup.sh         # http://localhost:8080/geoserver  (admin/geoserver)

Docker

docker run --name gs -p 8080:8080 \
  -e SKIP_DEMO_DATA=true \
  -e EXTRA_JAVA_OPTS="-Xms512m -Xmx2g" \
  -v $PWD/data:/opt/geoserver_data \
  docker.osgeo.org/geoserver:3.0.0

数据目录

GEOSERVER_DATA_DIR/
├── workspaces/<ws>/<store>/...
├── styles/
├── layergroups/
├── gwc/
└── security/

核心概念

概念	说明
Workspace	命名空间
Store	数据存储
Layer	图层（Store 资源 + 样式）
Style	渲染规则（SLD/CSS）
LayerGroup	图层组
GeoWebCache (GWC)	内置瓦片缓存

发布矢量图层（PostGIS）

创建 Workspace my_ws
添加 Store：选 PostGIS，填 host/db/user/pass
发布图层：选表 → 计算原始范围 → 设置 SRS
配置样式（默认 / SLD）
Layer Preview

访问 URL：

WMS  : /geoserver/my_ws/wms?service=WMS&version=1.1.0&request=GetMap&layers=my_ws:poi&srs=EPSG:4326&bbox=...&width=512&height=512&format=image/png
WMTS : /geoserver/gwc/service/wmts?...&LAYER=my_ws:poi&...
WFS  : /geoserver/my_ws/ows?service=WFS&version=2.0.0&request=GetFeature&typeNames=my_ws:poi&outputFormat=application/json
MVT  : /geoserver/gwc/service/wmts?...&FORMAT=application/vnd.mapbox-vector-tile

SLD 样式示例

<?xml version="1.0" encoding="UTF-8"?>
<StyledLayerDescriptor version="1.0.0"
    xmlns="http://www.opengis.net/sld" xmlns:ogc="http://www.opengis.net/ogc">
  <NamedLayer>
    <Name>poi</Name>
    <UserStyle><FeatureTypeStyle>
      <Rule>
        <ogc:Filter><ogc:PropertyIsGreaterThan>
          <ogc:PropertyName>pop</ogc:PropertyName>
          <ogc:Literal>1000000</ogc:Literal>
        </ogc:PropertyIsGreaterThan></ogc:Filter>
        <PointSymbolizer>
          <Graphic><Mark><WellKnownName>circle</WellKnownName>
            <Fill><CssParameter name="fill">#ff0000</CssParameter></Fill>
          </Mark><Size>10</Size></Graphic>
        </PointSymbolizer>
      </Rule>
    </FeatureTypeStyle></UserStyle>
  </NamedLayer>
</StyledLayerDescriptor>

Read the full file on GitHub · 233 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2d ago Changed 9f26d6287435
9d ago Changed 35d92108db36
12d ago First seen · 233 lines · 56 tokens per session scan A 8aa89190bc81

Subscribe to this mod's changes

geoserver is a skill published in the GitHub repository znlgis/opengis-skills (61 stars, last pushed yesterday), licensed MIT. It adds 56 tokens to every session and 2,246 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Java Languages Security map ogc server wcs web wfs wms wmts wps

dart-docs

Use this skill whenever the user asks about Dart, the client-optimized language for fast apps on any platform. Covers the full Dart 3.12 documentation including language tour (variables, operators, built-in types, records, collections, generics, typedefs, type system, patterns, control flow, error handling, functions…

pledgeandgrow/pledge-skills · 333 tokens

azure-security-keyvault-secrets-java

Azure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive configuration data.

microsoft/skills · 40 tokens

azure-ai-anomalydetector-java

Build anomaly detection applications with Azure AI Anomaly Detector SDK for Java. Use when implementing univariate/multivariate anomaly detection, time-series analysis, or AI-powered monitoring.

microsoft/skills · 43 tokens

azure-communication-chat-java

Build real-time chat applications with Azure Communication Services Chat Java SDK. Use when implementing chat threads, messaging, participants, read receipts, typing notifications, or real-time chat features.

microsoft/skills · 41 tokens

azure-communication-common-java

Azure Communication Services common utilities for Java. Use when working with CommunicationTokenCredential, user identifiers, token refresh, or shared authentication across ACS services.

microsoft/skills · 35 tokens

azure-ai-agents-persistent-java

Azure AI Agents Persistent SDK for Java. Low-level SDK for creating and managing AI agents with threads, messages, runs, and tools. Triggers: "PersistentAgentsClient", "persistent agents java", "agent threads java", "agent runs java", "streaming agents java".

microsoft/skills · 63 tokens

geoserver