Skill UI

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

This skill guides authorized security professionals through testing web applications for clickjacking vulnerabilities. It involves checking frame embedding controls (like X-Frame-Options and CSP) and crafting complex proof-of-concept overlays to see if users can be tricked into performing unintended sensitive actions, such as deleting accounts or transferring funds.

This guide provides a comprehensive methodology for auditing essential HTTP security headers, including CSP, HSTS, X-Frame-Options, and Referrer-Policy. It helps identify missing or improperly configured browser-level protections, crucial for mitigating vulnerabilities like XSS, clickjacking, and mixed content issues, ensuring compliance with standards like PCI DSS and SOC 2.

A comprehensive playbook for identifying and exploiting clickjacking vulnerabilities (UI redress). Learn how to test if target pages can be framed, bypass security headers like X-Frame-Options and CSP frame-ancestors, and execute high-impact actions through invisible iframes. This guide covers single-click, multi-step, and drag-and-drop attack vectors, applicable to sensitive endpoints like account deletion or admin panels.

This guide provides a comprehensive project management framework for submitting research to major robotics conferences, particularly RSS. It maps out the complex annual cycle, from abstract submission to final presentation, detailing critical deadlines, required milestones (like hardware trials and writing drafts), and fallback options at sibling venues (IROS, CoRL, ICRA). Essential for researchers managing time-sensitive academic pipelines.

This framework applies the Lindy Effect principle to assess the expected remaining life of non-perishable technologies, ideas, or practices. It treats the current survival age as a strong prior for future longevity, guiding users to favor proven, long-surviving options. It is crucial when making critical, high-stakes choices (like selecting frameworks or protocols) where relevance must last years, requiring checks for domain drift and a clear burden of proof before adopting novelty.

A comprehensive tool to inspect and configure critical HTTP security headers (such as CSP, CORS, X-Frame-Options) for modern web applications. It identifies security gaps, assesses cross-origin permissions, and guides users through hardening settings like cookie behavior, ensuring the site meets current industry security standards.

This skill focuses on identifying clickjacking vulnerabilities where malicious sites overlay transparent iframes over legitimate pages to trick users into unintended actions. It involves checking security headers like X-Frame-Options and CSP, verifying if sensitive actions can be triggered via framing, and ensuring proper authorization before testing. It is strictly for authorized security assessments and bug bounty programs.

This skill enables users to export and render videos using the Remotion framework via command-line interface. It supports rendering full videos and still images with options for transparency. Users should follow the documented CLI commands like npx remotion render or npx remotion still. It is suitable for video production workflows involving Remotion projects.