What problem does it solve? Web applications accumulate security gaps, deprecated API usage, and code quality issues that are hard to catch manually. This Skill provides a structured, evidence-led audit workflow based on Lighthouse Best Practices so agents can systematically find and fix problems in security, browser compatibility, and code quality. ## Core Features & Use Cases - Evidence-led audit workflow: Run live Lighthouse audits via Chrome DevTools MCP or fall back to the Lighthouse CLI, then verify findings with dependency, header, and source inspection. - Security hardening guidance: Covers HTTPS/HSTS, Content Security Policy, Trusted Types, Subresource Integrity, secure headers, dependency auditing, input sanitization, and secure cookies via a dedicated security reference. - Compatibility and quality patterns: Doctype, charset, viewport, feature detection, polyfill strategy, deprecated API replacements, passive listeners, error handling, source map hygiene, and semantic HTML with do/don't code examples. - Use Case: Ask an agent to run a security audit on a deployed page; it runs the Lighthouse audit, checks response headers and npm dependencies, consults the security reference, and returns a prioritized checklist of fixes. ## Quick Start Ask the agent to audit your web page for security vulnerabilities and modern best practices using the best-practices skill.
