security-review-owasp-json-web-token-for-java
CommunityReview Java JWTs for security flaws
Authorsjinks
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill helps reviewers assess Java-based JWT implementations for signature bypass, weak key handling, claim validation gaps, token replay risks, and revocation mistakes.
Core Features & Use Cases
- Reviews token creation, verification, storage, refresh, logout, and denylist logic in Java services.
- Checks for algorithm confusion, weak secrets, unsafe browser storage, and missing issuer, audience, and expiration validation.
- Useful when auditing authentication filters, API gateways, session replacement flows, or JWT-driven authorization rules.
Quick Start
Use the security-review-owasp-json-web-token-for-java skill to review the JWT authentication flow in the specified Java files and report confirmed weaknesses, review gaps, and passed checks.
Dependency Matrix
Required Modules
None requiredComponents
references
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: security-review-owasp-json-web-token-for-java Download link: https://github.com/sjinks/ai-owasp-skillset/archive/main.zip#security-review-owasp-json-web-token-for-java Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 537,000+ vetted skills library on demand.