best-practices

Audit web projects for security, compatibility, performance, and code quality.

1|Updated Mar 15, 2026
One-click install
npx skills add https://github.com/kennyolofsson23-netizen/claude-code-config --skill best-practices-kennyolofsson23-netizen
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: best-practices
Source: https://github.com/kennyolofsson23-netizen/claude-code-config/tree/main/skills/best-practices
Command: npx skills add https://github.com/kennyolofsson23-netizen/claude-code-config --skill best-practices-kennyolofsson23-netizen

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a concise, actionable checklist and guidance to eliminate common web application risks by improving security, browser compatibility, performance, and overall code quality so teams stop shipping fragile or insecure pages.

Core Features & Use Cases

  • Security hardening: guidance for HTTPS/HSTS, Content Security Policy, secure cookies, and essential security headers.
  • Dependency & vulnerability checks: instructions for running audits and keeping libraries up to date.
  • Compatibility & progressive enhancement: doctype, charset, viewport, feature detection, polyfills, and deprecated API replacements.
  • Performance & stability: advice on avoiding blocking scripts, efficient event handling, source map strategies, and memory management.
  • Code quality & UX: semantic HTML, error handling patterns, React error boundaries, and an audit checklist for production readiness.
  • Tools & audits: recommends npm audit, Lighthouse, W3C Validator, SecurityHeaders.com, and Mozilla Observatory for automated checks.

Quick Start

Run a best-practices audit on my project and return a prioritized checklist of security, compatibility, performance, and code-quality fixes.

Frequently Asked Questions about best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my web app for security headers and CSP compliance?

To audit web app security headers and CSP compliance, run a best-practices audit that checks HTTPS, HSTS, Content Security Policy, and secure cookies, returning a prioritized checklist of security fixes using tools like SecurityHeaders.com and Mozilla Observatory.

What is the best way to improve Lighthouse performance scores for a single-page app?

The best way to improve Lighthouse performance scores for a single-page app is to apply best-practice tuning: avoid blocking scripts, implement efficient event handling, optimize source maps, and manage memory effectively to satisfy Lighthouse recommendations.

How do I check browser compatibility and replace deprecated APIs in my static site?

To check browser compatibility and replace deprecated APIs in a static site, apply progressive enhancement techniques: validate doctype, charset, and viewport settings, then implement feature detection and polyfills to ensure cross-browser support.

Can I use this to run dependency vulnerability checks on my web application?

Yes, you can use this to run dependency vulnerability checks on your web application by executing npm audit instructions to identify vulnerable libraries and keep dependencies up to date as part of a comprehensive production readiness audit.

How do I fix React error boundaries and semantic HTML issues for production readiness?

To fix React error boundaries and semantic HTML issues for production readiness, apply code quality and UX best practices by implementing proper error handling patterns, using semantic HTML tags, and completing an audit checklist for production deployment.

When should I not rely solely on automated web audit tools for security hardening?

You should not rely solely on automated web audit tools for security hardening when dealing with complex application logic, as tools like W3C Validator and Lighthouse provide baseline checks but require manual implementation of secure cookies, CSP rules, and HSTS enforcement.