musiclaw

clawhub:musiclaw

View source
A
100/100

First Seen

Feb 19, 2026

Last Scanned

Feb 22, 2026

Findings

1

Score

100/100

LOW 1

Findings (1)

LOW
JWT token
L129

Detects JWT tokens

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImFseHpsZnV0eWh1eWV0cWltbHhpIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzEzNzE2NDMsImV4cCI6MjA4Njk0NzY0M30.O9fosm0S3nO_eEd8jOw5YRgmU6lAwdm2jLA...
FIX

Remove hardcoded JWT tokens from the skill definition. Generate tokens dynamically at runtime and set appropriate expiration times.

FP?

Likely FP if the matched text is a documentation example showing JWT structure with clearly fake values, or an expired demo token.