The Agent Skills Directory

[SAFE]: The skill implements JWT signing and verification using the industry-standard github.com/golang-jwt/jwt/v5 library.
[SAFE]: Implements explicit algorithm validation in the parser to prevent JWT algorithm confusion attacks, ensuring the token's algorithm header matches the server's expected configuration.
[SAFE]: Uses the cryptographically secure crypto/rand package for generating unique token IDs.
[SAFE]: Provides comprehensive security documentation regarding HMAC secret lengths, payload sensitivity, and token logging risks.
[SAFE]: Hardcoded cryptographic keys in examples.md are clearly isolated within unit tests and explicitly labeled as "test only", posing no risk to production environments.

go-jwt