jwt-oauth-token-attacks — security audits

Flagged by auditors

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  pass

  This skill is a playbook for security professionals to test JWT and OAuth 2.0 implementations for common vulnerabilities. It provides structured checklists and command-line examples for identifying issues like signature bypass and weak token secrets.

  Risk: SAFECOMMAND_EXECUTIONApr 8, 2026Full report

• Socket

  warn

  1 alert: gptSecurity

  Apr 8, 2026Full report

• Snyk

  fail

  Risk: CRITICAL · 3 issues

  Risk: CRITICALApr 8, 2026Full report

• ZeroLeaks

  pass

  2 findings · Score: 80/100

  Risk: LOWApr 16, 2026Full report