jwt-php
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides secure coding practices for JWT implementation in PHP, focusing on defense-in-depth measures like algorithm pinning and strict claim validation.
- [SAFE]: Secret management guidance correctly identifies that signing keys should be loaded from environment variables and never hardcoded in source control.
- [SAFE]: References to external libraries (firebase/php-jwt and lcobucci/jwt) target well-known, established open-source projects for security functionality.
Audit Metadata