api-auth-and-jwt-abuse
Description
Run this command in your terminal or agent shell
Tags & Topics
Skill Documentation (SKILL.md)
View on GitHubRelated AI Agent Skills
Official hack capability by @yaklang. Streamlines autonomous ai-agents tasks and workflows.
Official code obfuscation deobfuscation capability by @yaklang. Streamlines autonomous ai-agents tasks and workflows.
Official api sec capability by @yaklang. Streamlines autonomous backend tasks and workflows.
Official ssrf server side request forgery capability by @yaklang. Streamlines autonomous backend tasks and workflows.
Related Ecosystem Resources
Explore practical workflows, core terminology, and engineering tools
Part II. How to Work with Codex + Optimization/Security/Team
Codex is not just code autocomplete in a chat; it is a full-fledged engineering agent: it reads the repository, plans changes, edits files, runs tests, reviews its own diffs, and c...
How to Make AI Agents Safe: Stop Rules, Human Approval, and Sandboxes
An agent in production is a process that can write files, make API calls, change data, and consume tokens autonomously, without pausing and without your involvement at every step.
Agent Identity & DID (Decentralized Identifiers)
Cryptographic standards (DIDs, Verifiable Credentials, mTLS) that provide autonomous AI agents with a legally and technically recognized identity, signing rights, and action auditing.
Indirect Prompt Injection Defense
A comprehensive set of architectural and software methods to protect autonomous AI agents from hidden instructions placed by attackers in external web pages, documents, or APIs.
Claude Code adds variable to disable dangerous-command protections
Claude Code now includes an environment variable that can bypass even the safety blocks that remained active with --dangerously-skip-permissions.
Hackers can hijack Codex and Claude Code via malicious files in the Downloads folder
A plain text file in ~/Downloads can trick AI coding agents into changing settings, installing malware, or leaking authorization tokens, according to Forever Security.
yaklang-hack-skills-api-auth-and-jwt-abuse