Agent Skills

Testing for JSON Web Token (JWT) Vulnerabilities

Anthropic Cybersecurity Skills

Techniques and checks to find and exploit common JWT misconfigurations (alg none, alg confusion, kid/JKU injection, weak secrets).

Secure Code Guardian

claude-skills

Provides concrete guidance and code examples to implement authentication, authorization, input validation, and other defenses against OWASP Top 10 vulnerabiliti

API Security Best Practices

marketplace

Comprehensive guide and practical snippets to design and harden APIs: authentication, input validation, rate limiting, data protection, and testing patterns to

CTF Web Exploitation

ctf-skills

Comprehensive web-exploitation playbook for CTFs: XSS, SQLi, SSTI, SSRF, XXE, JWT abuse, auth bypass, file upload chains, and web-related reconnaissance.

Webclaw — Web Dashboard for OpenClaw

webclaw

A browser-based admin dashboard for OpenClaw skills: user management, RBAC, JWT auth, HTTPS setup, and realtime UI for installed skills.

Spring Authorization Server Specialist

claude-dev-suite

Expert guidance for building OAuth 2.1 and OpenID Connect (OIDC) providers using the Spring Authorization Server framework.

Acorn Middleware & Authentication

superpowers-sage

Implements Laravel-style HTTP middleware, JWT authentication, and request filtering within WordPress using Acorn and Sage.

JWT Vulnerability Testing

Anthropic Cybersecurity Skills

Identify and exploit critical JWT vulnerabilities including algorithm confusion, 'none' bypass, and weak secret exploitation.