Best Practices

The best-practices skill helps developers apply modern web development standards by providing guidance on security, browser compatibility, and code quality patterns based on Lighthouse audit recommendations. It addresses common vulnerabilities and misconfigurations in areas like HTTPS enforcement, Content Security Policy implementation, security headers, dependency management, and input sanitization. The skill is designed for web developers and security auditors who need to conduct security audits, modernize existing code, or perform code quality reviews.

skills.sh installs: 30.8K
GitHub stars: 3.1K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add addyosmani/web-quality-skills --skill best-practices --agent claude-code

Installs into .claude/skills of the current project.

Files

Best practices

Modern web development standards based on Lighthouse best practices audits. Covers security, browser compatibility, and code quality patterns.

Evidence-led audit workflow

When a rendered page is available:

Run a live Lighthouse Best Practices audit when that capability is available; with Chrome DevTools MCP, use lighthouse_audit. Use navigation mode for a normal page load or snapshot mode when the current state must be preserved.
Inspect the listed console and network failures and fetch individual details only when they support a finding.
Supplement runtime evidence with dependency, header, configuration, and source inspection; Lighthouse is not a complete security assessment.
Fix the implicated code, re-run the same audit, and keep security findings separate from style preferences.

If live tools are unavailable, use the Lighthouse CLI plus focused dependency and header checks. Never report a high Lighthouse score as proof that the application is secure.