{"id":458232,"recorded_at":"2026-10-27T11:36:22.197918Z","observed_at":"2026-10-27T11:36:22.197861Z","subject_kind":"source_record","subject":"x402_bazaar:https://api.aiskills402.com/v1/skills/jwt-verification-review/file","kind":"listing","method":"sync.x402_bazaar/1","body":{"endpoints":[["x402","https://api.aiskills402.com/v1/skills/jwt-verification-review/file"]],"name":"JWT Verification Review","owner_address":"0x8e37022edcf0f21cf3c9f93fee9d4d32519f36f4","raw":{"accepts":[{"amount":"10000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":60,"network":"eip155:8453","payTo":"0x8e37022edcf0f21cf3c9f93fee9d4d32519f36f4","scheme":"exact"}],"description":"JWT Verification Review — Reviews ONE piece of code that verifies JSON Web Tokens for the five mistakes that let a forged or stale token in, and lists only those, one line each with a fixed code, the function, why it hurts and the fix - or exactly No findings. It catches an algorithm taken from the token header or no fixed algorithm list, an expiry check switched off, neither audience nor issuer checked, a payload read with decode where verify is needed, and a signing secret written into the so…","extensions":{"bazaar":{"info":{"input":{"method":"GET","type":"http"},"output":{"example":{"file":{"content":"<the SKILL.md file>","encoding":"utf-8","name":"SKILL.md"},"name":"JWT Verification Review","ok":true,"receipt":{"settled":true,"tx":"0x<settlement transaction>"},"redownload":{"token":"<64 hex chars>","url":"<api>/v1/purchases/<token>"},"sha256":"<sha256 of SKILL.md>","skill":"jwt-verification-review","version":"1.0.0"},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"headers":{"additionalProperties":{"type":"string"},"type":"object"},"method":{"enum":["GET","HEAD"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-27T08:01:50.657Z","quality":{"lastCalledAt":"2026-10-27T08:01:50.657Z"},"resource":"https://api.aiskills402.com/v1/skills/jwt-verification-review/file","serviceName":"JWT Verification Review","tags":["agent-skill","jwt-verification-review","jwt","authentication","token-verification"],"type":"http","x402Version":2},"source":"x402_bazaar","summary":"JWT Verification Review — Reviews ONE piece of code that verifies JSON Web Tokens for the five mistakes that let a forged or stale token in, and lists only those, one line each with a fixed code, the function, why it hurts and the fix - or exactly No findings. It catches an algorithm taken from the token header or no fixed algorithm list, an expiry check switched off, neither audience nor issuer checked, a payload read with decode where verify is needed, and a signing secret written into the so…"},"body_sha256":"6584879cd94ebb148c7194db1d6b9023e87a881d88b7d1e6d889aec3c9ccbcb7","prev_id":null,"leaf":"0x70682a3132b038e20cc10ae2c7cad303ffab901a11526df844ea464d67507199","leaf_text":"{\"body\":\"6584879cd94ebb148c7194db1d6b9023e87a881d88b7d1e6d889aec3c9ccbcb7\",\"id\":458232,\"kind\":\"listing\",\"method\":\"sync.x402_bazaar/1\",\"observed_us\":1793100982197861,\"prev\":null,\"subject\":\"x402_bazaar:https://api.aiskills402.com/v1/skills/jwt-verification-review/file\",\"subject_kind\":\"source_record\"}","day":{"day":"2026-10-27","leaves":273461,"root":"0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795","chained":"0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4","anchor_chain":"eip155:5042002","anchor_tx":"0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4","anchor_block":69414147},"proof":["0x7068979adfb29b689c56325b43a26ab664da5d6c063b6e65d6035d66f193aa4c","0xb1eef7a58fd9d2270d73601c9e0d72a0d92b2ebfa1b3d1a1142bab3eef4a6533","0x56fc3e1e09a06d5852dd670483225f342de72a048200b683b2ae038840629890","0x0a056651ac2763836d9911847a4218fa8d95213972e4f45977424a3fd65f11eb","0x7969f3a5351cc886afb2b6c468fd4390811569bba46fd4e406973cc922a900b5","0x5091dc8ce3fbfe0909e153e1cc22aede1784cca2ce524b573b2b8e5ce03f50b1","0xb0559573cdebc2b5d7b913e5895d3d4f31f5a159e93a05ea9209594dc6e21e55","0xa22d5c5a2b647beea4a74720e42182e2cc00829ab90d077861113f3a15a42d9f","0xf48868f3c90c07ba6de26493a5e2d4b9db82ba601f6d9ccef31447643d5b59cc","0xa872bb1ffbdef6595bfc705d18f83e37733b9021795ed6fbd6b9106deb871710","0x8dfd9b64c5c5705a7996a8e2695cbd3c6bcad8c7f84f2d6e132889f554cf23cc","0x4150865dc22c5026ab3aaed78166c00f6d1d55d60deb27596b675ffe296e1e81","0x2926e99aefa0ff2e14a67a3ae10a7f6e753ce4b799c6fe531f8cbf8d33b31a66","0xb2ae53d841a55a805fb4078b1a7d44e08a81aba4be3690bac3a5b4c366bf39da","0x275720ecabb68df33eee92ae4fd70572a8d952d6c61c061c2869cfc3217aa5c5","0x23cf9bb4337ee8be7fcae368fd69d24c62c11fb45882127b4cd919bb96a19996","0x0e01aa9525097570a6edaf32bfc959de57bf5c24317cf10c0716affea85ca60d","0xa20d48798a34aba12eb9c7297722982d910f06c148f5e27ac59307422964a585","0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699"]}