jwt-oauth-token-attacks
Fail
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: CRITICALDATA_EXFILTRATIONCOMMAND_EXECUTIONPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill uses an AI LOAD INSTRUCTION to define an expert authentication token attack persona, which instructs the agent to focus on offensive operations like cryptographic attacks and flow abuse.\n- [DATA_EXFILTRATION]: The skill references the URL https://analytics.third-party.com/track in Section 11 as an example of a leakage vector. This specific URL has been flagged by security scanners as malicious and associated with botnet activity.\n- [COMMAND_EXECUTION]: The skill provides numerous pre-formatted shell commands for executing local security tools such as jwt_tool, hashcat, john the ripper, and openssl to perform brute-force attacks and token forgery.\n- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface for processing untrusted token data. Ingestion points: The skill is designed to process external JWT tokens found in web applications (SKILL.md). Boundary markers: None present to distinguish between benign data and injection payloads. Capability inventory: The skill utilizes tool execution for cryptographic manipulation and credential cracking (SKILL.md). Sanitization: Absent; the skill explicitly teaches the injection of SQL union statements and path traversal sequences into JWT headers.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata