sast-jwt
utkusen/sast-skillsSkill
Detect insecure JWT (JSON Web Token) implementations in a codebase using a
Why this score
This repo hosts 10 skills, so its 1,342 stars are split between them (about 134 each) for scoring.
Popularity score: 53/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit db52227eab10, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onesast-jwt utkusen/sast-skills · Skill | 53 | ★ 1.3k | ≈21 always | 7mo ago |
| attack-jwt CyberStrikeus/CyberStrike · Skill Both about jwt and token | 71 | ★ 3.2k | ≈25 always | 21d ago |
| api-auth-and-jwt-abuse yaklang/hack-skills · Skill Both about jwt and token | 69 | ★ 2.5k | ≈46 always | 2mo ago |
| offensive-jwt SnailSploit/Claude-Red · Skill Both about jwt and token | 79 | ★ 7.6k | ≈116 always | 23d ago |
| auth-security majiayu000/spellbook · Skill Both about jwt and token | 63 | ★ 288 | ≈40 always | 16d ago |