jwt-oauth-token-attacks
Description
Run this command in your terminal or agent shell
Tags & Topics
Skill Documentation (SKILL.md)
View on GitHubRelated AI Agent Skills
Official hack capability by @yaklang. Streamlines autonomous ai-agents tasks and workflows.
Official code obfuscation deobfuscation capability by @yaklang. Streamlines autonomous ai-agents tasks and workflows.
Official api sec capability by @yaklang. Streamlines autonomous backend tasks and workflows.
Official ssrf server side request forgery capability by @yaklang. Streamlines autonomous backend tasks and workflows.
Related Ecosystem Resources
Explore practical workflows, core terminology, and engineering tools
Prompt Extraction & Inversion Attacks
A methodology for analyzing cyber threats aimed at extracting secret system prompts, proprietary business logic, and hidden instructions through manipulative user queries.
Part II. How to Work with Codex + Optimization/Security/Team
Codex is not just code autocomplete in a chat; it is a full-fledged engineering agent: it reads the repository, plans changes, edits files, runs tests, reviews its own diffs, and c...
How to Make AI Agents Safe: Stop Rules, Human Approval, and Sandboxes
An agent in production is a process that can write files, make API calls, change data, and consume tokens autonomously, without pausing and without your involvement at every step.
Agent Identity & DID (Decentralized Identifiers)
Cryptographic standards (DIDs, Verifiable Credentials, mTLS) that provide autonomous AI agents with a legally and technically recognized identity, signing rights, and action auditing.
Claude Code adds variable to disable dangerous-command protections
Claude Code now includes an environment variable that can bypass even the safety blocks that remained active with --dangerously-skip-permissions.
Hackers can hijack Codex and Claude Code via malicious files in the Downloads folder
A plain text file in ~/Downloads can trick AI coding agents into changing settings, installing malware, or leaking authorization tokens, according to Forever Security.
yaklang-hack-skills-jwt-oauth-token-attacks