Аудит веб-кода: безопасность и качество по Lighthouse

★ 7.9 · marketing

best-practices is a Claude Code skill that audits and improves web code against security, browser compatibility, and code quality standards based on Lighthouse best practices audits. It activates on prompts like "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities". The skill covers HTTPS enforcement and HSTS, Content Security Policy with nonce-based inline scripts, Trusted Types for DOM-XSS defense (Baseline across all major browsers since early 2026), Subresource Integrity for third-party CDN scripts, security headers including X-Content-Type-Options, Referrer-Policy, and Permissions-Policy, and vulnerable dependency scanning via npm audit. It's aimed at developers who need to harden a legacy project, prepare for a security review, or bring their codebase up to modern browser standards.