best-practices

Audit HTML code for security, compatibility, and code quality issues.

1|Updated Dec 30, 2025
One-click install
npx skills add https://github.com/statick88/dotfiles --skill best-practices-statick88
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: best-practices
Source: https://github.com/statick88/dotfiles/tree/main/opencode/.agents/skills/best-practices
Command: npx skills add https://github.com/statick88/dotfiles --skill best-practices-statick88

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers ensure their web applications adhere to modern standards for security, browser compatibility, and overall code quality, reducing vulnerabilities and improving user experience.

Core Features & Use Cases

  • Security Audits: Identifies and provides solutions for common web security risks like mixed content, weak CSP, and vulnerable dependencies.
  • Compatibility Checks: Ensures code works across different browsers by addressing Doctype, character encoding, and viewport issues.
  • Code Quality: Offers guidance on semantic HTML, efficient event handling, and proper error management.
  • Use Case: A developer can use this Skill to review a new feature's code before deployment, ensuring it meets security benchmarks and functions correctly across major browsers.

Quick Start

Use the best-practices skill to audit the provided HTML code for security vulnerabilities.

Frequently Asked Questions about best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my web application for security vulnerabilities and code quality?

To audit web application security and code quality, you can review your code against Lighthouse benchmarks to identify mixed content, weak Content Security Policy, and deprecated APIs, then apply secure coding patterns and efficient resource loading optimizations.

What are the best practices for configuring secure cookies and HTTPS enforcement?

Best practices for secure cookies and HTTPS enforcement involve applying strict Content Security Policies, ensuring all resources load over HTTPS to prevent mixed content, and configuring cookie attributes to prevent unauthorized access and session hijacking vulnerabilities.

How does a Lighthouse audit improve browser compatibility for web development?

A Lighthouse audit improves browser compatibility by checking for proper Doctype declarations, character encoding configurations, and viewport settings, ensuring your web code renders consistently and functions correctly across major browsers.

Can I check my HTML code for deprecated APIs and performance issues before deployment?

You can check your HTML code for deprecated APIs and performance issues before deployment by auditing your event handling efficiency, semantic HTML structure, and resource loading patterns to ensure modern web standards adherence.

Why does my web application have mixed content and weak Content Security Policy warnings?

Mixed content and weak Content Security Policy warnings occur when your web application loads non-HTTPS resources or lacks strict CSP headers, requiring you to enforce HTTPS and define secure resource loading policies to mitigate risks.