best-practices

Automates web development best-practice audits for security, compatibility, and code quality.

3|Updated Dec 25, 2025
One-click install
npx skills add https://github.com/thoreinstein/agents --skill best-practices-thoreinstein
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: best-practices
Source: https://github.com/thoreinstein/agents/tree/main/skills/best-practices
Command: npx skills add https://github.com/thoreinstein/agents --skill best-practices-thoreinstein

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams consistently apply modern web development best practices to improve security, compatibility, and code quality across web projects.

Core Features & Use Cases

  • Security hardening: enforce HTTPS, HSTS, and robust Content Security Policy (CSP).
  • Browser compatibility & performance: ensure proper doctype, encoding, viewport, and efficient loading patterns.
  • Code quality & maintainability: detect deprecated APIs, promote semantic HTML, and improve error handling.
  • Auditing & remediation: provide checklists and actionable steps for CI pipelines and manual reviews.

Quick Start

Use the best-practices Skill to run an audit on your frontend codebase and generate a remediation plan.

Frequently Asked Questions about best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a frontend security audit for HTTPS, CSP, and security headers?

Run a frontend security audit using a checklist-driven approach to enforce HTTPS, HSTS, and robust Content Security Policy. It scans your web app for missing security headers and generates reproducible reports with actionable remediation steps.

What is the best way to check a web app for deprecated APIs and browser compatibility issues?

The best way to check browser compatibility and deprecated APIs is through an automated modernization audit. It detects outdated APIs, verifies proper doctype and viewport settings, and provides a checklist to ensure cross-browser compatibility.

Can I automate web security and code quality checks in a CI pipeline?

Yes, you can automate web security and code quality checks in a CI pipeline. The checklist-driven approach integrates into CI pipelines to run vulnerability checks, detect deprecated APIs, and output reproducible reports for continuous code quality monitoring.

How do I improve code quality and maintainability in a frontend project?

Improve frontend code quality by auditing your project for semantic HTML usage, efficient loading patterns, and proper error handling. The audit detects deprecated APIs and generates a remediation plan to improve overall maintainability and performance.

Does this best practices audit work for both manual reviews and automated CI pipelines?

Yes, the best practices audit works for both manual reviews and automated CI pipelines. It provides checklists and actionable steps that fit manual code inspections while generating reproducible reports suitable for automated vulnerability checks and CI integration.