Skill UI

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

This skill guides authorized security professionals through testing web applications for clickjacking vulnerabilities. It involves checking frame embedding controls (like X-Frame-Options and CSP) and crafting complex proof-of-concept overlays to see if users can be tricked into performing unintended sensitive actions, such as deleting accounts or transferring funds.

This guide provides a comprehensive methodology for auditing essential HTTP security headers, including CSP, HSTS, X-Frame-Options, and Referrer-Policy. It helps identify missing or improperly configured browser-level protections, crucial for mitigating vulnerabilities like XSS, clickjacking, and mixed content issues, ensuring compliance with standards like PCI DSS and SOC 2.

A comprehensive playbook for identifying and exploiting clickjacking vulnerabilities (UI redress). Learn how to test if target pages can be framed, bypass security headers like X-Frame-Options and CSP frame-ancestors, and execute high-impact actions through invisible iframes. This guide covers single-click, multi-step, and drag-and-drop attack vectors, applicable to sensitive endpoints like account deletion or admin panels.

This guide provides a comprehensive project management framework for submitting research to major robotics conferences, particularly RSS. It maps out the complex annual cycle, from abstract submission to final presentation, detailing critical deadlines, required milestones (like hardware trials and writing drafts), and fallback options at sibling venues (IROS, CoRL, ICRA). Essential for researchers managing time-sensitive academic pipelines.

This framework applies the Lindy Effect principle to assess the expected remaining life of non-perishable technologies, ideas, or practices. It treats the current survival age as a strong prior for future longevity, guiding users to favor proven, long-surviving options. It is crucial when making critical, high-stakes choices (like selecting frameworks or protocols) where relevance must last years, requiring checks for domain drift and a clear burden of proof before adopting novelty.