← 返回 Skills 市场
298
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install jwt-toolkit
功能描述
Decode, inspect, and validate JWT (JSON Web Token) tokens from the command line. Shows header, payload, algorithm, expiry status, and known claim labels. Use...
使用说明 (SKILL.md)
JWT Toolkit
Zero-dependency JWT decoder and inspector. Decodes any JWT token and shows header, payload claims, algorithm info, expiry status, and signature details.
Quick Start
# Decode a JWT token
python3 scripts/jwt_decode.py eyJhbGciOiJIUzI1NiIs...
# Read token from file
python3 scripts/jwt_decode.py --file token.txt
# Read from stdin (pipe from curl, etc.)
echo "eyJ..." | python3 scripts/jwt_decode.py --stdin
# JSON output for scripting
python3 scripts/jwt_decode.py eyJ... --format json
# Also handles "Bearer " prefix automatically
python3 scripts/jwt_decode.py "Bearer eyJhbGciOiJIUzI1NiIs..."
Features
- Decodes header and payload with human-readable claim labels
- Shows algorithm details and security warnings (e.g.,
nonealgorithm) - Checks token expiry with remaining time or time-since-expired
- Recognizes 20+ standard and common claims (iss, sub, aud, roles, scope, etc.)
- Strips "Bearer " prefix automatically
- JSON and text output formats
- No external dependencies — pure Python stdlib
安全使用建议
This tool decodes and inspects JWTs locally and does not send data over the network or request credentials. Points to consider before installing: (1) The script does not verify signatures (it reports algorithm and presence/absence of a signature but does not validate using keys/secrets), so it cannot confirm token authenticity—use a verification tool with the appropriate key if you need real signature validation. (2) JWTs often contain sensitive info—avoid pasting production tokens into third-party/shared environments. (3) Because the skill can be invoked by an agent, be mindful where you run it (don’t let an automated agent decode tokens you wouldn’t want exposed).
功能分析
Type: OpenClaw Skill
Name: jwt-toolkit
Version: 1.0.0
The jwt-toolkit is a legitimate utility for decoding and inspecting JSON Web Tokens (JWT). The Python script (scripts/jwt_decode.py) uses only standard libraries, performs no network operations, and contains no evidence of data exfiltration or malicious execution. It correctly identifies security risks like the 'none' algorithm and provides human-readable summaries of token claims and expiry status.
能力评估
Purpose & Capability
Name/description match the included script: a small Python utility that decodes JWT header/payload, reports algorithm and expiry, and prints claim labels. There are no unrelated environment variables, binaries, or installs requested.
Instruction Scope
SKILL.md instructs only local use of scripts/jwt_decode.py (token via arg, file, or stdin). The runtime instructions do not request other files, environment variables, or sending data to external endpoints.
Install Mechanism
No install spec is present; the shipped script is pure Python stdlib and requires no external packages. No downloads or archive extraction are performed.
Credentials
The skill requires no environment variables, credentials, or config paths. The code does not read environment variables or attempt to access unrelated credentials.
Persistence & Privilege
The skill does not request permanent/always-on presence (always: false) and does not modify other skills or system settings. It runs only when invoked.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install jwt-toolkit - 安装完成后，直接呼叫该 Skill 的名称或使用
/jwt-toolkit触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of jwt-toolkit — a zero-dependency tool to decode and inspect JWT tokens from the command line.
- Decode JWT tokens and display header, payload, algorithm, and signature details
- Inspect known claims with human-readable labels
- Automatically checks expiry status and remaining validity time
- Handles "Bearer" prefixes and standard input, file, or direct string input
- Supports both JSON and human-readable text output formats
- Built in pure Python with no external dependencies
元数据
常见问题
Jwt Toolkit 是什么？
Decode, inspect, and validate JWT (JSON Web Token) tokens from the command line. Shows header, payload, algorithm, expiry status, and known claim labels. Use... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 298 次。
如何安装 Jwt Toolkit？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install jwt-toolkit」即可一键安装，无需额外配置。
Jwt Toolkit 是免费的吗？
是的，Jwt Toolkit 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Jwt Toolkit 支持哪些平台？
Jwt Toolkit 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Jwt Toolkit？
由 John Wang（@johnnywang2001）开发并维护，当前版本 v1.0.0。
推荐 Skills