Home / Skills / api-auth-and-jwt-abuse
api-auth-and-jwt-abuse
yaklang/hack-skillsSkill
API authentication and JWT abuse playbook. Use when testing bearer tokens, API keys, claim trust, header spoofing, rate limits, and API auth boundary weaknesses.
Why this score
This repo hosts 10 skills, so its 2,509 stars are split between them (about 251 each) for scoring.
Popularity score: 69/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 21, 2026 at commit 6fbf0bc8d5c7, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneapi-auth-and-jwt-abuse yaklang/hack-skills · Skill | 69 | ★ 2.5k | ≈46 always | 2mo ago |
| auth-security majiayu000/spellbook · Skill Both about auth and jwt | 63 | ★ 288 | ≈40 always | 16d ago |
| attack-jwt CyberStrikeus/CyberStrike · Skill Both about jwt and claim | 71 | ★ 3.2k | ≈25 always | 21d ago |
| sast-jwt utkusen/sast-skills · Skill Both about jwt and token | 53 | ★ 1.3k | ≈21 always | 7mo ago |
| auth microsoft/apm · Skill Both about auth and token | 75 | ★ 4.0k | ≈20 always | 16d ago |
| auth-ops 0xDarkMatter/claude-mods · Skill Both about auth and jwt | 57 | ★ 68 | ≈97 always | 21d ago |