Skill UI

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

This skill guides authorized security professionals through testing web applications for clickjacking vulnerabilities. It involves checking frame embedding controls (like X-Frame-Options and CSP) and crafting complex proof-of-concept overlays to see if users can be tricked into performing unintended sensitive actions, such as deleting accounts or transferring funds.

A comprehensive playbook for identifying and exploiting clickjacking vulnerabilities (UI redress). Learn how to test if target pages can be framed, bypass security headers like X-Frame-Options and CSP frame-ancestors, and execute high-impact actions through invisible iframes. This guide covers single-click, multi-step, and drag-and-drop attack vectors, applicable to sensitive endpoints like account deletion or admin panels.

This framework applies the Lindy Effect principle to assess the expected remaining life of non-perishable technologies, ideas, or practices. It treats the current survival age as a strong prior for future longevity, guiding users to favor proven, long-surviving options. It is crucial when making critical, high-stakes choices (like selecting frameworks or protocols) where relevance must last years, requiring checks for domain drift and a clear burden of proof before adopting novelty.

A comprehensive tool to inspect and configure critical HTTP security headers (such as CSP, CORS, X-Frame-Options) for modern web applications. It identifies security gaps, assesses cross-origin permissions, and guides users through hardening settings like cookie behavior, ensuring the site meets current industry security standards.

A guided interview skill that helps users improve their .faf (FAF) context file to achieve 100% AI-readiness. Uses Claude Code's AskUserQuestion tool to fill missing project information through interactive questions. Ideal for developers wanting to optimize their project context for AI agents and improve Gold Code scoring. Supports multi-select options for testing, hosting, and framework choices.

This skill focuses on identifying clickjacking vulnerabilities where malicious sites overlay transparent iframes over legitimate pages to trick users into unintended actions. It involves checking security headers like X-Frame-Options and CSP, verifying if sensitive actions can be triggered via framing, and ensuring proper authorization before testing. It is strictly for authorized security assessments and bug bounty programs.

This skill enables users to export and render videos using the Remotion framework via command-line interface. It supports rendering full videos and still images with options for transparency. Users should follow the documented CLI commands like npx remotion render or npx remotion still. It is suitable for video production workflows involving Remotion projects.