Find weak token trust and authentication boundaries.
What it does
Guides testing of API authentication and JWT trust boundaries, including claims, headers, rate limits, and API keys.
When to use it
Use when testing APIs that rely on JWTs, bearer tokens, API keys, or weak request identity signals.
How to use it
It changes how the agent tests API authentication by focusing on token trust, claim misuse, header spoofing, and rate-limit bypass.
Latest review
What you need · 0
No setup requirements listed.
Access · 1
This skill
target APIs
Write
Sends crafted requests to APIs