sast-jwt

BENIGN for internal consistency: the skill’s capabilities match its stated purpose of JWT-focused SAST and local reporting, with no suspicious installs, credential harvesting, or off-platform data routing. The main concern is that it equips an AI agent with offensive security testing guidance against JWT implementations, making it a higher-risk security skill rather than a malicious one.