jwt-security
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is an educational resource providing guidelines and code examples for JSON Web Token (JWT) security. The instructions promote best practices including algorithm whitelisting, signature verification, secure token storage, and proper claim validation.
- [COMMAND_EXECUTION]: The skill includes code snippets that use standard Node.js modules like
fsto read key files (e.g.,private.pem). This is presented in an educational context for signing tokens and does not represent a security risk. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries in the Node.js ecosystem for authentication handling. These dependencies are legitimate and commonly used for the described tasks.
Audit Metadata