best-practices

Apply web development best practices for security, compatibility, and code quality.

1|Updated Apr 13, 2026
One-click install
npx skills add https://github.com/yahav123147/paid-ads-cro-skills --skill best-practices-yahav123147
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: best-practices
Source: https://github.com/yahav123147/paid-ads-cro-skills/tree/main/skills/best-practices
Command: npx skills add https://github.com/yahav123147/paid-ads-cro-skills --skill best-practices-yahav123147

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Prevent security issues, compatibility breakages, and maintainability problems by applying well-tested modern web development best practices.

Core Features & Use Cases

  • Security hardening: Enforce HTTPS, configure Content Security Policy (CSP), apply security headers, and reduce XSS risk through safe rendering and sanitization.
  • Compatibility and quality checks: Ensure correct doctype, charset placement, viewport meta tag, feature detection, and avoid deprecated browser APIs.
  • Reliability and performance guidance: Catch console/error anti-patterns, implement proper error handling patterns, improve performance with non-blocking loading and event delegation, and avoid memory leaks.

Quick Start

Ask the AI to review your page or code for security headers, CSP configuration, deprecated APIs, HTML validity, and performance best practices.

Frequently Asked Questions about best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Content Security Policy headers to harden website security?

Configuring Content Security Policy headers hardens website security by defining approved resource sources, enforcing HTTPS-only assets, and reducing XSS risk through safe rendering and input sanitization. It applies Lighthouse-aligned modern web development best practices.

What are the best practices for avoiding deprecated browser APIs in frontend code?

Avoiding deprecated browser APIs requires feature detection, correct doctype declarations, and proper viewport meta tags. Checking compatibility ensures robust error handling and prevents compatibility breakages across frontend HTML, CSS, and JavaScript.

Does this approach work for general HTML validation and security audits?

Yes, this approach works for security audits and HTML validation by checking charset placement, CSP configuration, and security headers. It evaluates frontend code quality and vulnerability-focused reviews using modern web standards.

How do I improve frontend performance with non-blocking loading patterns?

Improve frontend performance with non-blocking loading by catching console error anti-patterns, implementing proper error handling, and using event delegation. This prevents memory leaks and aligns with performance-aware development patterns.

What is the best way to prevent XSS through safe input handling in frontend JavaScript?

Preventing XSS through safe input handling requires robust sanitization, secure rendering practices, and strict Content Security Policy enforcement. It mitigates vulnerability risks by applying modern security standards to frontend JavaScript.