Skill · em Proteger
best-practices
Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities".
Procedência
- Origem: davila7/claude-code-templates
- Caminho:
cli-tool/components/skills/development/best-practices - Versão fixada:
57f899e5394bb8ca166f38eacae8f0853cbfe033 - Licença: MIT
- Espelhado em 25/09/2026
- 9 downloads no Claude Code Templates (lido em 25/09/2026)
Antes de instalar
1 arquivo · 11,9 KB · só texto, nenhum script
Instalar na sua CLI
O comando baixa a versão fixada (commit 57f899e) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.
Claude Code
Neste projeto: instala em .claude/skills/best-practices/.
d=".claude/skills/best-practices" u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/development/best-practices" curl -fsSL --create-dirs \ -o "$d/SKILL.md" "$u/SKILL.md"
Global: instala em ~/.claude/skills/best-practices/.
d="$HOME/.claude/skills/best-practices" u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/development/best-practices" curl -fsSL --create-dirs \ -o "$d/SKILL.md" "$u/SKILL.md"
Codex
Neste projeto: instala em .agents/skills/best-practices/.
d=".agents/skills/best-practices" u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/development/best-practices" curl -fsSL --create-dirs \ -o "$d/SKILL.md" "$u/SKILL.md"
Global: instala em ~/.agents/skills/best-practices/.
d="$HOME/.agents/skills/best-practices" u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/development/best-practices" curl -fsSL --create-dirs \ -o "$d/SKILL.md" "$u/SKILL.md"
Antigravity
Neste projeto: instala em .agents/skills/best-practices/.
d=".agents/skills/best-practices" u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/development/best-practices" curl -fsSL --create-dirs \ -o "$d/SKILL.md" "$u/SKILL.md"
Global: instala em ~/.gemini/antigravity-cli/skills/best-practices/.
d="$HOME/.gemini/antigravity-cli/skills/best-practices" u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/development/best-practices" curl -fsSL --create-dirs \ -o "$d/SKILL.md" "$u/SKILL.md"
Peça ao Rook
Já usa o Rook Labs? Cole no chat do Rook: instale a skill https://rooklabs.sh/marketplace/cct.best-practices
Prévia do SKILL.md
---
name: best-practices
description: Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities".
license: MIT
metadata:
author: web-quality-skills
version: "1.0"
---
# Best practices
Modern web development standards based on Lighthouse best practices audits. Covers security, browser compatibility, and code quality patterns.
## Security
### HTTPS everywhere
**Enforce HTTPS:**
```html
<!-- ❌ Mixed content -->
<img src="http://example.com/image.jpg">
<script src="http://cdn.example.com/script.js"></script>
<!-- ✅ HTTPS only -->
<img src="https://example.com/image.jpg">
<script src="https://cdn.example.com/script.js"></script>
<!-- ✅ Protocol-relative (will use page's protocol) -->
<img src="//example.com/image.jpg">
```
**HSTS Header:**
```
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
```
### Content Security Policy (CSP)
```html
<!-- Basic CSP via meta tag -->
…