jwt-tool

SUSPICIOUS. The skill is internally consistent with its stated purpose, but that purpose is an offensive JWT exploitation toolkit for an AI agent. The main concern is not deceptive install behavior; it is that the skill enables automated security testing and active exploitation against target services, including forged-token delivery to remote URLs. Treat as a high-risk offensive-security skill rather than confirmed malware.