Web Quality Skills
Skill Verified ActiveApply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities".
To help developers implement robust, secure, and high-quality web applications by providing actionable best practices and patterns.
Features
- Security best practices (HTTPS, CSP, SRI, input sanitization)
- Browser compatibility guidelines (Doctype, charset, viewport, feature detection)
- Code quality patterns (valid HTML, semantic HTML, error handling)
- Performance optimization advice
- References to auditing tools and resources
Use Cases
- When asked to apply best practices to web code.
- When performing a security audit on a web application.
- When modernizing existing web code.
- When conducting a code quality review for a web project.
Non-Goals
- Automated code fixing (provides guidance, not direct code modification).
- Framework-specific linting or code generation.
- Runtime monitoring or performance profiling.
Installation
First, add the marketplace
/plugin marketplace add addyosmani/web-quality-skills/plugin install web-quality-skills@addy-web-quality-skillsQuality Score
VerifiedTrust Signals
Similar Extensions
Coding Standards
100Baseline cross-project coding conventions for naming, readability, immutability, and code-quality review. Use detailed frontend or backend skills for framework-specific patterns.
Semgrep Rule Creator
100Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.
Safe Mode
100Prevent destructive operations using Claude Code hooks. Three modes — cautious (warn on dangerous commands), lockdown (restrict edits to one directory), and clear (remove restrictions). Uses PreToolUse matchers for Bash, Edit, and Write.
Fixflow
100Execute coding tasks with a strict delivery workflow: build a full plan, implement one step at a time, run tests continuously, and commit by default after each step (`per_step`). Support explicit commit policy overrides (`final_only`, `milestone`) and optional BDD (Given/When/Then) when users ask for behavior-driven delivery or requirements are unclear.
Ship Gate
100Pre-production audit that scans a codebase for security, database, deployment, code quality, AI/LLM, dependency, frontend, and observability issues. Intercepts deploy commands and blocks until critical items pass. Stack-agnostic. Use for "run ship gate", "am I ready to ship", "pre-launch audit", "can I deploy", "push to production", "go live checklist", "preflight check". Not for CI/CD setup or infra provisioning.
Supabase Postgres Best Practices
99Postgres performance optimization and best practices from Supabase. Use this skill when writing, reviewing, or optimizing Postgres queries, schema designs, or database configurations.