skills.rest
aymenhamoudii
aymenhamoudiiCOMMUNITY
Explore all skills by this author →
GitHub

best-practices

Audit web applications for security, compatibility, performance, and code quality issues.

Updated Mar 21, 2026
Search Tags:#performance#security#compatibility#audit#csp#best-practices#hsts
One-click install
npx skills add https://github.com/aymenhamoudii/digitn-website --skill best-practices-aymenhamoudii
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: best-practices
Source: https://github.com/aymenhamoudii/digitn-website/tree/main/.qwen/skills/best-practices
Command: npx skills add https://github.com/aymenhamoudii/digitn-website --skill best-practices-aymenhamoudii

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps teams identify and remediate common web application issues across security, browser compatibility, performance, and code quality by translating Lighthouse and OWASP guidance into actionable checks and configuration recommendations.

Core Features & Use Cases

  • Security Hardening: Guidance for enforcing HTTPS/HSTS, Content Security Policy, secure cookies, and recommended security headers.
  • Dependency & Vulnerability Checks: Instructions to run dependency audits, detect vulnerable libraries, and keep packages up to date.
  • Compatibility & Performance: Recommendations for doctype, charset, viewport, polyfills, deferred loading, and avoiding blocking resources.
  • Code Quality & Stability: Advice on semantic HTML, error handling, memory cleanup, source map management, and deprecated API replacement.
  • Use Case: Run a pre-deployment audit to remove mixed content, configure CSP and security headers, fix deprecated APIs, and produce a prioritized remediation checklist.

Quick Start

Run a best-practices audit on the repository and produce a prioritized list of security, compatibility, performance, and code-quality fixes.

Frequently Asked Questions about best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Content Security Policy and security headers for my web app?▼

Content Security Policy and security headers are configured by validating HTTPS and HSTS enforcement, recommending secure cookies, and generating specific header directives to harden web applications against cross-site scripting and injection attacks.

What is the best way to audit web app dependencies for vulnerabilities?▼

Auditing web app dependencies for vulnerabilities involves running dependency checks to detect vulnerable libraries and producing a prioritized remediation checklist to update packages and resolve security issues.

How do I fix Lighthouse performance and compatibility issues on a static site?▼

Fixing Lighthouse performance and compatibility issues on a static site requires identifying deprecated APIs, adding viewport tags and polyfills, deferring loading of blocking resources, and managing exposed source maps.

Can I use this for a pre-deployment security audit on existing web applications?▼

Yes, you can use this for a pre-deployment security audit on existing web applications to remove mixed content, configure CSP and security headers, fix deprecated APIs, and produce a prioritized remediation checklist.

Why does my web application need HSTS enforcement and secure cookies?▼

HSTS enforcement and secure cookies are needed to prevent protocol downgrade attacks and session hijacking by ensuring HTTPS is strictly enforced and session data is transmitted securely across web applications.

What security and compatibility checks are needed for modern web development?▼

Modern web development security and compatibility checks include enforcing HTTPS, validating doctype and charset, replacing deprecated APIs, running dependency vulnerability checks, and configuring Content Security Policy headers.

Related Skills

Explore More Software Engineering Skills→
89jobrien89jobrien
4

dependency-management

Analyze dependency manifests to update packages, scan vulnerabilities, and verify licenses.

Community
Intermediate
jeremylongshorejeremylongshore
2.6k

scanning-database-security

Scan PostgreSQL and MySQL databases for security vulnerabilities and generate remediation reports.

Community
Advanced
danieldev24danieldev24

ci-cd-and-automation

Automates CI/CD pipeline setup and quality gates for code verification.

Community
Advanced
NickCrewNickCrew
29

owasp-top-10

Identify OWASP Top 10 security vulnerabilities in web applications.

Community
Advanced