security-jwt
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive security guidance for JWT implementation, explicitly warning against hardcoding secrets, using long-lived tokens, and storing PII in payloads.
- [EXTERNAL_DOWNLOADS]: The skill recommends standard, well-known Symfony community packages (
lexik/jwt-authentication-bundle,gesdinet/jwt-refresh-token-bundle) from official repositories. - [COMMAND_EXECUTION]: Instructions include standard Symfony CLI commands like
bin/console lexik:jwt:generate-keypairfor generating cryptographic keys locally. - [CREDENTIALS_UNSAFE]: No hardcoded credentials were found for exploitation. An illustrative 'BAD' example contains a dummy password ('hunter2') specifically to demonstrate insecure practices to avoid.
Audit Metadata