Skip to main content
Open Skills
clickjackingby yaklang.io ProjectDevelopmentGitHub stars: 2.5k

Clickjacking skill: what it does and how to install it

Tests whether web pages can be framed and whether hidden UI overlays can trick users into sensitive actions.

Summary generated from the skill's documentation.

Install

$ npx skills add yaklang/hack-skills --skill clickjacking

Run it in a terminal. If your agent is already running, start a new session so it picks the skill up.

About this skill

What it does. Checks X-Frame-Options and CSP frame-ancestors settings, then describes iframe proof-of-concept tests for single- and multi-step actions. It also covers frame-busting bypasses and identifies sensitive actions to assess.

When to use it. For authorised security testing of web pages that may be vulnerable to clickjacking, including checks of authenticated and unauthenticated views.

History

Repo stars

2.5k+177 since 5 Oct 2026

Stars are counted for the whole repository, which holds 15 skills.

Show as a table
Repo stars by day
DateRepo stars
26 Oct 20262,549
25 Oct 20262,538
24 Oct 20262,533
23 Oct 20262,528
22 Oct 20262,523
21 Oct 20262,521
20 Oct 20262,513
19 Oct 20262,508
18 Oct 20262,492
17 Oct 20262,466
16 Oct 20262,458
15 Oct 20262,455
14 Oct 20262,450
13 Oct 20262,443
12 Oct 20262,437
11 Oct 20262,426
10 Oct 20262,418
9 Oct 20262,412
8 Oct 20262,401
7 Oct 20262,382
6 Oct 20262,375
5 Oct 20262,372

Installs

3.6k+115 since 19 Oct 2026

Installs via skills.sh

Show as a table
Installs by day
DateInstalls
26 Oct 20263,591
25 Oct 20263,574
24 Oct 20263,560
23 Oct 20263,543
22 Oct 20263,527
21 Oct 20263,509
20 Oct 20263,493
19 Oct 20263,476

Similar skills