The Agent Skills Directory

[SAFE]: The skill is a comprehensive educational resource for JWT security best practices. It identifies critical vulnerabilities like algorithm switching and weak secrets, providing clear guidance on how to avoid them.
[SAFE]: The code snippets provided for Node.js using the jsonwebtoken library follow secure development principles, such as using environment variables for secrets, implementing refresh token rotation, and mandating algorithm whitelisting during token verification.
[SAFE]: No evidence of malicious behavior, data exfiltration, or obfuscation was found in the instructions or the illustrative code. The skill appropriately recommends against storing tokens in localStorage to prevent XSS vulnerabilities.

jwt-security