skills.rest
Prohao42
Prohao42COMMUNITY
Explore all skills by this author →
GitHub

clickjacking

Detect clickjacking vulnerabilities by verifying frameability and evaluating X-Frame-Options and CSP frame-ancestors.

120|8|Updated Jun 2, 2026
Search Tags:#clickjacking#csp#web-security#security-testing#x-frame-options#frameability
One-click install
npx skills add https://github.com/Prohao42/aimy-sikll --skill clickjacking-prohao42
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: clickjacking
Source: https://github.com/Prohao42/aimy-sikll/tree/main/ai-mian/hack-skills/skills/clickjacking
Command: npx skills add https://github.com/Prohao42/aimy-sikll --skill clickjacking-prohao42

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Clickjacking attack surfaces are often overlooked; this playbook helps testers determine if a page can be framed and identify protective measures.

Core Features & Use Cases

  • Check whether a target page is frameable and whether X-Frame-Options or CSP frame-ancestors are properly configured.
  • Provide actionable guidance to mitigate UI redress vulnerabilities in admin and sensitive workflows.
  • Use in both manual assessments and automated tests to verify UI integrity across environments.

Quick Start

Describe a target page to test and perform a frameability assessment to confirm protections are in place and note any frameable endpoints.

Frequently Asked Questions about clickjacking

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if a web page is vulnerable to clickjacking?▼

Assess clickjacking risk by verifying page frameability and evaluating X-Frame-Options and CSP frame-ancestors directives across typical user flows and sensitive actions.

What is the difference between X-Frame-Options and CSP frame-ancestors for preventing UI redressing?▼

X-Frame-Options and CSP frame-ancestors are both evaluated to confirm protections. Assessing these directives determines if a page is frameable and guides remediation for UI redress vulnerabilities.

How do I test admin panels for frameability and clickjacking risk?▼

Apply frameability assessments across admin panels and sensitive workflows to identify real-world clickjacking risk and generate actionable remediation guidance for UI redress vulnerabilities.

Can I use automated security testing to verify CSP frame-ancestors configuration?▼

Automated security testing verifies CSP frame-ancestors and X-Frame-Options configurations, reporting frameable targets and confirming UI integrity across environments for clickjacking defense.

What are the limitations of relying only on X-Frame-Options for web security?▼

Relying solely on X-Frame-Options leaves security gaps; comprehensive assessments must also evaluate CSP frame-ancestors directives to accurately determine frameability and provide complete remediation guidance.

Related Skills

Explore More Software Engineering Skills→
DevelopersCoffeeDevelopersCoffee
3

cwe-113-http-response-splitting

Sanitizes Java HTTP headers and cookies to prevent CWE-113 CRLF injection.

Official
Intermediate
fatihkanfatihkan
7

sc-clickjacking

Detect missing X-Frame-Options and CSP frame-ancestors headers in web applications.

Community
Intermediate
igbuendigbuend
8

missing-security-headers-anti-pattern

Detect missing HTTP security headers in web application responses.

Community
Intermediate
DevelopersCoffeeDevelopersCoffee
3

cwe-693-missing-security-headers

Implement HTTP security headers in Java Spring Boot applications.

Official
Intermediate