Competition Jwt Claim Confusion
Internal downstream skill for ctf-sandbox-orchestrator.
by zhaoxuya520
The skill
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for JWT, JWS, and JWE validation paths, header parsing, key selection, claim acceptance, audience and issuer checks, role derivation, and token-to-identity confusion bugs. Use when the user asks to inspect JWT headers or claims, key lookup, `kid` handling, `alg` confusion, audience or issuer validation, role claims, or explain how a token becomes accepted identity or privilege. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.
This skill's licence does not allow redistribution, so the store does not show its text. Read it at the source.
Use this skill
Connect your agent to the Skill Store MCP server and ask for it by ref: zhaoxuya520/competition-jwt-claim-confusion-24688572372.
Details
- Publisher
- zhaoxuya520
- Category
- Security › Application security
- Updated
- 2026-09-22
References
More from zhaoxuya520
- Competition Ad Certificate Abuse Internal downstream skill for ctf-sandbox-orchestrator.
- Competition Agent Cloud Internal downstream skill for ctf-sandbox-orchestrator.
- Competition Android Hooking Internal downstream skill for ctf-sandbox-orchestrator.
- Competition Browser Persistence Internal downstream skill for ctf-sandbox-orchestrator.