Skill Store 33

Competition Jwt Claim Confusion

Internal downstream skill for ctf-sandbox-orchestrator.

by zhaoxuya520

The skill

Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for JWT, JWS, and JWE validation paths, header parsing, key selection, claim acceptance, audience and issuer checks, role derivation, and token-to-identity confusion bugs. Use when the user asks to inspect JWT headers or claims, key lookup, `kid` handling, `alg` confusion, audience or issuer validation, role claims, or explain how a token becomes accepted identity or privilege. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.

This skill's licence does not allow redistribution, so the store does not show its text. Read it at the source.

Use this skill

Connect your agent to the Skill Store MCP server and ask for it by ref: zhaoxuya520/competition-jwt-claim-confusion-24688572372.

Markdown version

Details

Publisher
zhaoxuya520
Category
Security › Application security
Updated
2026-09-22

References

More from zhaoxuya520