jwt-cracker

High-risk offensive security skill. Its capabilities match its stated purpose, but that purpose is to help an AI agent perform JWT exploitation and authentication bypass, including use of third-party callback capture services. Not confirmed malware, but clearly unsafe and inappropriate for general agent deployment.