The Agent Skills Directory

[SAFE]: The skill serves as a technical guide for JWT implementation. It provides standard examples for asymmetric signing (RS256) and automated key rotation via JWKS.
[SAFE]: All code snippets use reputable, industry-standard Node.js libraries such as jsonwebtoken, jose, and jwks-rsa for cryptographic operations.
[SAFE]: The skill explicitly promotes security best practices, including enforcing algorithm whitelisting to prevent algorithm confusion attacks, validating standard claims (iss, aud, exp), and using secure cookie storage to mitigate XSS risks.

jwt