SKILL

best-practices

应用现代Web开发最佳实践，以确保安全性、兼容性和代码质量。适用于被要求“应用最佳实践”、“安全审计”、“现代化代码”、“代码质量审查”或“检查漏洞”时。

机器翻译

查看英文原文

Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities".

适用对象：云服务、运维与安全。自动收录 · 待核查。

原作者说明节选

从固定版本的 SKILL.md 提取，保留原文语言。以下内容属于作者说明，本站尚未验证安装、兼容或运行结果。

查看英文原文

原文涵盖的主题

Best practices
Security
HTTPS everywhere
Content Security Policy (CSP)
Security headers
No vulnerable libraries
Input sanitization
Secure cookies

Modern web development standards based on Lighthouse best practices audits. Covers security, browser compatibility, and code quality patterns. Enforce HTTPS: HSTS Header: CSP Header (recommended): Using nonces for inline scripts: Keep dependencies updated: Known vulnerable patterns to avoid: -- -- -- -- -- -- -- -- [ ] HTTPS enabled, no mixed content [ ] No vulnerable dependencies (npm audit) [ ] CSP headers configured [ ] Security headers present [ ] No exposed source maps [ ] Valid HTML5 doctype [ ] Charset declared first in head [ ] Viewport meta tag present [ ] No deprecated APIs used [ ] Passive event listeners for scroll/touch [ ] No console errors [ ] Valid HTML (no duplicate IDs) [ ] Semantic HTML elements used [ ] Proper error handling [ ] Memory cleanup in components [ ] No intrusive interstitials [ ] Permission requests in context [ ] Clear error messages [ ] Appropriate image aspect ratios | Tool | Purpose | |------|---------| | npm audit | Dependency vulnerabilities | | SecurityHeaders.com | Header analysis | | W3C Validator | HTML validation | | Lighthouse | Best practices audit | | Observatory | Security scan | MDN Web Security OWASP Top 10 Web Quality Audit

来源仓库: davila7/claude-code-templates
源文件: cli-tool/components/skills/development/best-practices/SKILL.md
固定版本: 21be197f100a12b8d0dd9a211cc244c8179f84d3

阅读完整原作者说明 ↗