best-practices

Audit web projects for security, compatibility, and code quality issues.

Updated Feb 24, 2026
One-click install
npx skills add https://github.com/ofelixdev/cc-kit --skill best-practices-ofelixdev
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: best-practices
Source: https://github.com/ofelixdev/cc-kit/tree/main/template/skills/best-practices
Command: npx skills add https://github.com/ofelixdev/cc-kit --skill best-practices-ofelixdev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers adhere to modern web development standards, ensuring code is secure, compatible across browsers, and maintains high quality.

Core Features & Use Cases

  • Security Audits: Identifies and helps fix common security vulnerabilities like mixed content, weak CSP, and vulnerable dependencies.
  • Compatibility Checks: Ensures code works across different browsers by checking for proper doctype, character encoding, and viewport settings.
  • Code Quality: Promotes semantic HTML, efficient event handling, and proper error management.
  • Use Case: A developer can use this skill to review a new feature branch, ensuring it meets security and compatibility requirements before merging.

Quick Start

Use the best-practices skill to audit the current project for security vulnerabilities and code quality issues.

Frequently Asked Questions about best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my web application for security and code quality issues?

To audit web application security and code quality, review HTTPS enforcement, Content Security Policy implementation, and dependency vulnerabilities. This process identifies mixed content, weak CSP, and deprecated APIs to enhance overall robustness and maintainability.

What does Content Security Policy implementation do for web development security?

Content Security Policy implementation mitigates common web vulnerabilities by restricting resource loading and execution. It serves as a critical security layer that prevents cross-site scripting and data injection attacks when properly configured in web applications.

How do I ensure browser compatibility when developing web features?

To ensure browser compatibility, verify proper doctype, character encoding, and viewport meta tags. Use feature detection instead of browser detection and avoid deprecated APIs to guarantee code works across different browsers.

Can I check for vulnerable dependencies before merging a new web feature branch?

Yes, you can check for vulnerable dependencies before merging a new feature branch by running a dependency vulnerability audit. This verifies that your project meets security requirements and identifies outdated or compromised packages.

What is the best way to enforce HTTPS and fix mixed content in my web app?

The best way to enforce HTTPS and fix mixed content is to audit your application for insecure resource loading. Identifying and upgrading HTTP requests to HTTPS ensures all content is served securely and prevents protocol downgrade attacks.

When do I need feature detection instead of relying on deprecated web APIs?

You need feature detection when deprecated APIs are removed from modern browsers. Checking for feature availability before usage ensures your code maintains compatibility and prevents runtime errors across different browser environments.