OpenAgentSkill Registry Manifest
Skill: competition-jwt-claim-confusion
Slug: zhaoxuya520-competition-jwt-claim-confusion
Category: research
Description: Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for JWT, JWS, and JWE validation paths, header parsing, key selection, claim acceptance, audience and issuer checks, role derivation, and token-to-identity confusion bugs. Use when the user asks to inspect JWT headers or claims, key lookup, `kid` handling, `alg` confusion, audience or issuer validation, role claims, or explain how a token becomes accepted identity or privilege. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.

Agent fit:
- Decision: 100/100 Production-ready
- Primary fit: Local desktop
- Role: Primary pick

Supply profile:
- Track: Research and knowledge work
- Scenario: Research agents
- Applicable agents: Claude Code, CLI, Codex, Cursor
- Maintenance: 6d since push
- Risk: Needs review

Trust:
- Trust score: 83/100 Strong shortlist
- Audit: 89/100 Needs review

Attribution:
- Status: Registry indexed
- Source: github fast track
- Creator: zhaoxuya520
- Claim URL: https://www.openagentskill.com/skills/zhaoxuya520-competition-jwt-claim-confusion#claim-this-skill

Install:
npx skills add zhaoxuya520/reverse-skill --skill competition-jwt-claim-confusion

URLs:
- Web: https://www.openagentskill.com/skills/zhaoxuya520-competition-jwt-claim-confusion
- API: https://www.openagentskill.com/api/agent/skills/zhaoxuya520-competition-jwt-claim-confusion
- Install API: https://www.openagentskill.com/api/skills/zhaoxuya520-competition-jwt-claim-confusion/install
- Repository: https://github.com/zhaoxuya520/reverse-skill/tree/main/CTF-Sandbox-Orchestrator/competition-jwt-claim-confusion