Download

Skill UI

Browse and discover 9119+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search JWT , found 48 results

Default Newest Most Downloaded

Application Security Hardening

security-hardening

rohitg00/awesome-claude-code-toolkit

Comprehensive checklist for application security hardening, covering input validation, output encoding, SQL/CSRF defenses, security headers, JWT best practices, secrets handling, rate limiting, and dependency audits to keep web services resilient.

Security Implementation Patterns

security-patterns

CloudAI-X/claude-workflow-v2

Provides authentication, authorization, encryption, secrets, and hardening patterns for designing secure auth flows, managing tokens, configuring CORS, and implementing best practices around API keys, JWT, OAuth, and rate limiting.

Supabase Custom Role-Based Access Control

supabase-enterprise-rbac

jeremylongshore/claude-code-plugins-plus-skills

Implements a robust, enterprise-grade Role-Based Access Control (RBAC) system for Supabase. This skill teaches how to store custom roles (e.g., admin, editor, viewer) in JWT claims (`app_metadata`), enforce granular permissions, and scope access at the row level using PostgreSQL RLS policies. It covers organization scoping, role hierarchy management, and API key protection.

Authentication Security Validator

validating-authentication-implementations

jeremylongshore/claude-code-plugins-plus-skills

Validating Authentication Implementations assesses authentication mechanisms like JWT, OAuth, sessions, and API keys against security standards, then reports vulnerabilities and recommendations for password policy, MFA, token handling, and session security.

Ktor Server Patterns

kotlin-ktor-patterns

affaan-m/everything-claude-code

Comprehensive Kotlin-based Ktor server blueprint covering routing DSL, serialization, authentication, DI, WebSockets, and testing best practices for building resilient HTTP services.

JWT Algorithm Confusion

exploiting-jwt-algorithm-confusion-attack

mukul975/Anthropic-Cybersecurity-Skills

Guides API testers through exploiting JWT algorithm confusion by forcing RS256 tokens to HS256, abusing alg:none signature bypasses, and injecting attacker-controlled keys via kid/jku/x5u headers to verify that servers enforce the expected signing algorithm.

Secure JWT Signing Practices

implementing-jwt-signing-and-verification

mukul975/Anthropic-Cybersecurity-Skills

Guides implementing secure JWT signing and verification with HS256, RS256, ES256, and EdDSA, covering claims validation, expiration control, key rotation, and protections against common attacks for authentication layers.

JWT None Attack Testing

performing-jwt-none-algorithm-attack

mukul975/Anthropic-Cybersecurity-Skills

Provides steps and tooling for intercepting JWTs, crafting tokens with the alg header set to none, and submitting forged privileged claims to verify whether a service improperly skips signature verification during authorized security testing.

API Authentication Weakness Tests

testing-api-authentication-weaknesses

mukul975/Anthropic-Cybersecurity-Skills

Scans REST APIs for authentication flaws by probing endpoints, JWT/OAuth flows, API key handling, and session management to highlight broken validation, missing auth layers, and credential weaknesses before production rollout.

JWT Vulnerability Testing

testing-for-json-web-token-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Test JWT implementations for algorithm confusion, none bypass, kid/jku injections, and weak secrets to validate authentication and privilege controls during security assessments.

JWT Token Security Testing

testing-jwt-token-security

mukul975/Anthropic-Cybersecurity-Skills

Performs targeted security assessments of JSON Web Token implementations, probing algorithm confusion, claim tampering, brute-force secrets, and misuse during penetration tests of APIs, SSO, and microservice authentication flows.

Mobile API Auth Testing

testing-mobile-api-authentication

mukul975/Anthropic-Cybersecurity-Skills

Secures mobile application APIs by exercising authentication flows, JWT/OAuth/OIDC defenses, token misuse, broken object-level authorization, and session management to expose vulnerabilities during penetration testing.

Prev 1 234 Next

Language