jwt-attacks

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs capturing JWTs and embedding them verbatim in commands and the vulnerability report (e.g., sample token in the repro and use of "$JWT" / PUBKEY_CONTENT), which requires the LLM to handle and potentially output secret token/key values.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit offensive guide describing multiple JWT attack techniques (alg=none, RS→HS key confusion, kid path traversal/SQLi, jku/jwk hosting, weak-HMAC cracking, token capture) intended to enable authentication bypass and token forgery.