api-token-sec

To test JWT tokens for weak signing keys, decode tokens, inspect claims, and apply tests against HS256-like algorithms to detect weak-key scenarios. This skill validates results by testing protected resources with Bearer tokens.

CORS misconfiguration detection identifies cross-origin policy weaknesses in REST APIs and microservices using Bearer tokens. It applies tests to evaluate cross-origin policies and produce actionable remediation steps.

Auditing API token security for microservices requires providing a target API URL to run a focused assessment. This identifies token handling weaknesses, misconfigurations, and weak-key scenarios across endpoints.

Yes, you can enumerate API token vulnerabilities in target services. It identifies and enumerates security weaknesses in API tokens, CORS, and JWT configurations across target services.

The best way to detect misconfigurations in JWT claims is to decode tokens and inspect claims for misclaims. This skill applies deterministic, modular evaluation flows to validate protection and detect weaknesses.

API token security testing does not require specific dependencies. It uses a modular evaluation flow that loads and runs sub-skills to validate protections and generate remediation steps.