jwt-security
Pass
Audited by Runlayer on Feb 21, 2026
Risk Level: LOW
Scan Summary
Flagged Files (1)
SKILL.mdHIGH
70.9%
Tool passed security scan
Malicious tool definition detected
Tool: SKILL.md [2/2] Description: Use Redis in production function revokeToken(jti) { revokedTokens.add(jti); } function isTokenRevoked(jti) { return revokedTokens.has(jti); } // Include revocation check in validation async function validateToken(token) { const decoded = jwt.verify(token, key, options); if (decoded.jti && isTokenRevoked(decoded.jti)) { throw new Error('Token has been revoked'); } return decoded; } ``` ## Key Rotation ```javascript // Support multiple keys during rotation const k
Audit Metadata