web-platform-conventions

What problem does it solve?

This Skill eliminates security vulnerabilities and build errors caused by inconsistent web frontend configurations, including misconfigured Content-Security-Policy headers and deprecated Next.js middleware usage.

Core Features & Use Cases

• Strict CSP Enforcement: Provides clear, security-first rules for CSP directives to prevent unauthorized network access, XSS attacks, and data exfiltration risks.
• Next.js 16+ Edge Code Guidance: Eliminates build errors by mandating proxy.ts over deprecated middleware.ts for auth, redirects, and header logic.
• Use Case: When integrating a third-party analytics tool into a Next.js web frontend, this Skill guides you to add the SDK's origin to the CSP connect-src directive correctly and implement any required auth redirects in proxy.ts instead of legacy middleware.

Quick Start

Use the web-platform-conventions skill to update the CSP script-src directive when adding a new third-party customer support chat SDK to the web frontend.