skills.rest
dallay
dallayOFFICIAL
Explore all skills by this author →
WebsiteGitHub

best-practices

Audit frontend web projects for security, compatibility, and code quality issues.

Updated Apr 14, 2026
Search Tags:#performance#security#audit#code-quality#csp#best-practices#browser-compatibility
One-click install
npx skills add https://github.com/dallay/opencode-docker --skill best-practices-dallay
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: best-practices
Source: https://github.com/dallay/opencode-docker/tree/main/config/skills/best-practices
Command: npx skills add https://github.com/dallay/opencode-docker --skill best-practices-dallay

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a practical, actionable audit and guidance flow to eliminate common web application issues related to security, browser compatibility, and code quality so teams can ship safer, more reliable sites.

Core Features & Use Cases

  • Security hardening: recommendations for HTTPS, HSTS, CSP, secure cookies, input sanitization, and security headers.
  • Compatibility & deprecation checks: doctype and charset guidance, viewport and feature-detection patterns, polyfill strategies, and deprecated API replacements.
  • Performance & quality checklist: guidance on blocking resources, source map handling, event listener best practices, and memory cleanup with concrete remediation items.
  • Use Case: Audit a single-page application to identify mixed content, missing security headers, vulnerable dependencies, deprecated APIs, and produce a prioritized remediation checklist for the engineering team.

Quick Start

Run a best-practices audit on the project and produce a prioritized checklist with concrete header/CSP snippets, dependency checks, and compatibility fixes.

Frequently Asked Questions about best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my web application for missing security headers and CSP issues?▼

Auditing web applications for missing security headers and Content Security Policy issues requires evaluating HTTPS, HSTS, and secure cookie configurations. This generates prioritized remediation steps and concrete header snippets to harden single-page applications.

How do I check my single-page application for deprecated APIs and browser compatibility pitfalls?▼

Checking single-page applications for deprecated APIs and browser compatibility pitfalls involves verifying doctypes, viewports, and feature-detection patterns. This delivers polyfill strategies and replacement guidance to ensure modern web compatibility.

What is the best way to identify and fix performance bottlenecks in a static site?▼

Identifying and fixing performance bottlenecks in static sites requires reviewing blocking resources, event listeners, and memory cleanup patterns. This yields a concrete remediation checklist to eliminate common frontend performance pitfalls.

Can I integrate web security and code quality checks into my CI pipeline?▼

Integrating web security and code quality checks into CI pipelines is fully supported for frontend projects. The audit delivers checklist-style recommendations and configuration snippets suitable for developers to automate compatibility and vulnerability checks.

Does this audit handle dependency vulnerabilities in frontend web projects?▼

The audit handles dependency vulnerabilities in frontend web projects by scanning for known issues. It produces a prioritized remediation checklist that addresses vulnerable dependencies alongside missing security headers and deprecated APIs.

Related Skills

Explore More Software Engineering Skills→
aymenhamoudiiaymenhamoudii

best-practices

Audit web applications for security, compatibility, performance, and code quality issues.

Community
Intermediate
fjavidcrfjavidcr

best-practices

Audit web projects with Lighthouse-based best practices for security and compatibility.

Community
Intermediate
kennyolofsson23-netizenkennyolofsson23-netizen

best-practices

Audit web projects for security, compatibility, performance, and code quality.

Community
Intermediate
Serg28Serg28

security-reviewer

Automate security audits with semgrep, trivy, gitleaks, and dependency scanners.

Community
Intermediate