Skill UI

A specialized downstream skill for deep security analysis of JSON Web Tokens (JWT), JWS, and JWE. It guides the identification of vulnerabilities where token components (headers, claims, keying) lead to unauthorized identity assumption or privilege escalation. Use this to trace the full path from token supply to final application acceptance.

A rigorous framework to prevent confident fabrication (hallucination) by treating competence as an evidence boundary. It guides users to classify claims—Grounded, Partial, or Ungrounded—based on verifiable sources. It mandates assessing the cost of wrongness before answering, fetching, or abstaining, ensuring that assertions are always backed by sufficient evidence.