Habilidades modern-web-guidance
📦
modern-web-guidance
Revisión del contenido r1 Riesgo alto ⚙️ Comandos externos🌐 Acceso a red⚡ Contiene scripts📁 Acceso al sistema de archivos
Build with Modern Web Standards
Frontend guidance becomes outdated as browser APIs and support levels change. This skill finds focused implementation guides with compatibility and fallback advice.
Compatible con: Claude Codex Code(CC)
Detente y solicita confirmación antes de instalar.
Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "modern-web-guidance" from https://skillstore.io/skills/googlechrome-modern-web-guidance.md and its manifest at https://skillstore.io/api/skills/googlechrome-modern-web-guidance/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "modern-web-guidance". Find the recommended way to build an accessible modal dialog.
Resultado esperado:
A focused guide selection with native dialog guidance, keyboard behavior, focus handling, dismissal rules, and fallback notes.
Usando "modern-web-guidance". Review image loading for the main page banner.
Resultado esperado:
A prioritized checklist covering loading priority, dimensions, responsive sources, decoding, and Largest Contentful Paint impact.
Usando "modern-web-guidance". Plan a view transition that works in older browsers.
Resultado esperado:
A progressive enhancement plan with support checks, a functional nonanimated path, reduced-motion handling, and test considerations.
Auditoría de seguridad
Riesgo altov1 • 22/9/2026 Abrir el informe versionado
Most static alerts are lexical false positives from Markdown, JavaScript syntax, keyboard events, and ordinary web terminology. Confirmed concerns include mandatory unpinned package execution, unversioned CDN code imports, one insecure HTTP script example, shared temporary cache use, and one unsafe innerHTML interpolation. Static review was capped at 400/620 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
148
Archivos escaneados
22,440
Líneas analizadas
56
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (1)
Alto
Mandatory Unpinned Package Execution
The skill directs agents to run modern-web-guidance@latest before frontend work and requests network approval plus a wildcard command allowlist. A mutable package release can execute without review.
The cited instructions explicitly mandate npx execution of an @latest package and request network-enabled wildcard allowlisting.
Elementos de revisión de capacidades (56)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import('https://esm.sh/@js-temporal/polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import('https://esm.sh/@js-temporal/polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import('https://unpkg.com/webauthn-polyfills');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import("https://unpkg.com/@oddbird/css-anchor-positioning");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import('https://esm.run/invokers-polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import('https://esm.run/invokers-polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import('https://esm.run/invokers-polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import("https://unpkg.com/interestfor@latest");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import("https://unpkg.com/interestfor@latest");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import("https://unpkg.com/@oddbird/css-anchor-positioning");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://cdn.jsdelivr.net/npm/motion@latest/dist/motion.js").then(({ animate, spring }) => {
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import("https://unpkg.com/@oddbird/css-anchor-positioning");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import('https://esm.sh/@js-temporal/polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
script.src = 'https://unpkg.com/scheduler-polyfill';
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import('https://esm.sh/@js-temporal/polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
await import('https://unpkg.com/webauthn-polyfills');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
await import('https://esm.run/invokers-polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import('https://esm.run/invokers-polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
await import('https://esm.run/invokers-polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
await import("https://unpkg.com/interestfor@latest");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
await import("https://unpkg.com/interestfor@latest");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://cdn.jsdelivr.net/npm/motion@latest/dist/motion.js").then(({ animate, spring }) => {
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/three-html-render/dist/polyfill.js"></script>
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/three-html-render/dist/polyfill.js"></script>
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/three-html-render/dist/polyfill.js"></script>
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Medio
innerHTML assignment (XSS risk)
container.innerHTML = `<iframe src="https://www.youtube-nocookie.com/embed/${videoId}?autoplay=1" al
The example interpolates a DOM dataset value into an innerHTML string without validation. A manipulated video ID could break the attribute context and inject markup.
Medio
Temp directory access
- In sandboxed environments where `~/.npm` is read-only or restricted, set `NPM_CONFIG_CACHE=/tmp/np
The guide recommends a fixed shared temporary path for executable package cache data. Pre-creation or cache reuse can create local tampering risk.
Medio
Hardcoded URL
<script defer src="http://www.example.com/third-party.js"></script>
The example loads a script over plain HTTP. On an HTTP page it permits network modification, and on an HTTPS page browsers block it as mixed content.
Factores de riesgo
⚙️ Comandos externos (50)
guides/built-in-ai/language-detection.md:36-42 guides/built-in-ai/language-model.md:29-34 guides/built-in-ai/language-model.md:157-159 guides/built-in-ai/prompt-api.md:29-34 guides/built-in-ai/prompt-api.md:157-159 guides/built-in-ai/summarizer.md:48-54 guides/built-in-ai/translator.md:66-75 guides/built-in-ai/translator.md:90-100 guides/css/css.md:75-87 guides/css/design-token-reactivity.md:84-92 guides/forms/animated-select-picker.md:91-147 guides/forms/brand-consistent-forms.md:252-255 guides/js/calculate-event-differentials.md:43-44 guides/js/calculate-event-differentials.md:44-51 guides/js/coordinate-global-events.md:22-39 guides/js/coordinate-global-events.md:39-43 guides/js/coordinate-global-events.md:43-44 guides/js/format-human-readable-durations.md:82-83 guides/js/format-human-readable-durations.md:83-85 guides/js/format-human-readable-durations.md:85-87 guides/js/manage-recurring-intervals.md:24-30 guides/js/manage-recurring-intervals.md:30-39 guides/js/model-partial-time-concepts.md:29-31 guides/js/model-partial-time-concepts.md:60-61 guides/js/model-partial-time-concepts.md:61-62 guides/js/support-global-calendar-systems.md:39-43 guides/js/support-global-calendar-systems.md:43-44 guides/js/support-global-calendar-systems.md:44-45 guides/js/support-global-calendar-systems.md:45-49 guides/js/support-global-calendar-systems.md:49-56 guides/js/support-global-calendar-systems.md:56-64 guides/performance/batch-analytics-events.md:112-154 guides/performance/detect-initial-visibility-state.md:98-101 guides/performance/flicker-free-client-side-ab-testing.md:28 guides/performance/flicker-free-client-side-ab-testing.md:29-30 guides/performance/flicker-free-client-side-ab-testing.md:30-39 guides/performance/full-session-analytics.md:93-135 guides/performance/optimize-image-priority.md:27-55 guides/performance/out-of-order-html-streaming.md:84 guides/performance/sequence-distributed-events.md:44-47 guides/privacy/privacy.md:155-158 guides/security/sanitize-untrusted-html.md:17-24 guides/security/security.md:71-74 guides/security/security.md:74-75 guides/ui-atoms/carousel-slide-effects.md:73-78 guides/ui-atoms/carousel-slide-effects.md:99-106 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:20-24 guides/ui-atoms/scroll-progress-indicator.md:129-133 guides/ui-atoms/shrinking-header-on-scroll.md:123-126 guides/ui-atoms/state-aware-sticky-headers.md:131-137
🌐 Acceso a red (50)
guides/built-in-ai/language-detection.md:66 guides/built-in-ai/summarizer.md:129 guides/built-in-ai/translator.md:159 guides/forms/forms.md:234 guides/html/html.md:96 guides/js/calculate-event-differentials.md:78 guides/js/capture-location-agnostic-data.md:56 guides/js/coordinate-global-events.md:67 guides/js/format-human-readable-durations.md:52 guides/js/manage-recurring-intervals.md:61 guides/js/model-partial-time-concepts.md:89 guides/js/stabilize-reactive-state.md:65 guides/js/support-global-calendar-systems.md:99 guides/performance/batch-analytics-events.md:118 guides/performance/deprioritize-background-fetches.md:14 guides/performance/deprioritize-background-fetches.md:17 guides/performance/flicker-free-client-side-ab-testing.md:73 guides/performance/flicker-free-client-side-ab-testing.md:34 guides/performance/flicker-free-client-side-ab-testing.md:54 guides/performance/flicker-free-client-side-ab-testing.md:122 guides/performance/full-session-analytics.md:99 guides/performance/out-of-order-html-streaming.md:77 guides/performance/performance.md:145 guides/performance/performance.md:230 guides/performance/schedule-tasks-by-priority.md:45 guides/performance/sequence-distributed-events.md:69 guides/privacy/privacy.md:139 guides/privacy/privacy.md:148 guides/privacy/privacy.md:155 guides/privacy/privacy.md:166 guides/security/passkey-management.md:142 guides/security/passkey-management.md:206 guides/security/passkey-reauthentication.md:62 guides/security/passkey-reauthentication.md:77 guides/security/security.md:269 guides/security/security.md:99 guides/security/security.md:111 guides/security/security.md:119 guides/security/security.md:149 guides/security/security.md:208 guides/security/security.md:214 guides/security/security.md:322 guides/security/security.md:331 guides/security/security.md:342 guides/ui-atoms/position-aware-tooltips.md:143 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:88 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:115 guides/ui-behaviors/animate-to-from-top-layer.md:152 guides/ui-behaviors/custom-button-actions.md:102 guides/ui-behaviors/declarative-dialog-popover-control.md:94
⚡ Contiene scripts (49)
guides/js/calculate-event-differentials.md:78 guides/js/calculate-event-differentials.md:58 guides/js/capture-location-agnostic-data.md:56 guides/js/capture-location-agnostic-data.md:37 guides/js/coordinate-global-events.md:67 guides/js/format-human-readable-durations.md:52 guides/js/manage-recurring-intervals.md:61 guides/js/model-partial-time-concepts.md:89 guides/js/stabilize-reactive-state.md:65 guides/js/stabilize-reactive-state.md:12 guides/js/support-global-calendar-systems.md:99 guides/js/support-global-calendar-systems.md:49 guides/performance/conditional-async-dependencies.md:22 guides/performance/conditional-async-dependencies.md:72 guides/performance/performance.md:356 guides/performance/performance.md:368 guides/performance/sequence-distributed-events.md:69 guides/privacy/privacy.md:155 guides/security/passkey-management.md:206 guides/security/sanitize-untrusted-html.md:84 guides/security/security.md:71 guides/security/security.md:236 guides/ui-atoms/position-aware-tooltips.md:134 guides/ui-atoms/position-aware-tooltips.md:143 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:79 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:88 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:115 guides/ui-behaviors/animate-to-from-top-layer.md:143 guides/ui-behaviors/animate-to-from-top-layer.md:152 guides/ui-behaviors/custom-button-actions.md:102 guides/ui-behaviors/declarative-dialog-popover-control.md:82 guides/ui-behaviors/declarative-dialog-popover-control.md:94 guides/ui-behaviors/declarative-dialog-popover-control.md:123 guides/ui-behaviors/declarative-dialog-popover-control.md:210 guides/ui-behaviors/declarative-dialog-popover-control.md:219 guides/ui-behaviors/interest-triggered-action-previews.md:62 guides/ui-behaviors/interest-triggered-tooltips.md:86 guides/ui-behaviors/interest-triggered-tooltips.md:105 guides/ui-behaviors/interest-triggered-tooltips.md:114 guides/ui-behaviors/interest-triggered-tooltips.md:145 guides/ui-behaviors/physics-based-easing.md:102 guides/ui-components/persistent-app-tours.md:71 guides/ui-components/persistent-app-tours.md:80 guides/ui-components/persistent-app-tours.md:109 guides/ui-components/persistent-toast-notifications.md:30 guides/ui-components/persistent-toast-notifications.md:39 guides/ui-components/stack-drill-down.md:253 guides/ui-components/stack-drill-down.md:269 guides/visual-design/interactive-content-in-3d-scenes.md:328
📁 Acceso al sistema de archivos (3)
Auditado por: codex
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/googlechrome-modern-web-guidance/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/googlechrome-modern-web-guidance?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/googlechrome-modern-web-guidance?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/googlechrome-modern-web-guidance/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/googlechrome-modern-web-guidance.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
googlechrome. (2026). modern-web-guidance security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/googlechrome-modern-web-guidance/audits/1Cita BibTeX
@techreport{googlechrome-googlechrome-modern-web-guidance-2026,
author = {googlechrome},
title = {modern-web-guidance security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/googlechrome-modern-web-guidance/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "modern-web-guidance security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "googlechrome"
date-released: "2026-09-22"
url: "https://skillstore.io/skills/googlechrome-modern-web-guidance/audits/1"
identifiers:
- type: other
value: "skillstore:googlechrome-modern-web-guidance:audit:1"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 55
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
91
Cumplimiento de la especificación
Lo que puedes crear
Implement a frontend feature
Find a current browser-native pattern before building a component or interaction.
Review web quality
Check an existing interface for accessibility, performance, privacy, and security guidance.
Plan progressive enhancement
Compare browser support and select practical fallbacks for a product requirement.
Prueba estos prompts
Find a relevant guide
Search for guidance on [frontend task]. Return the best matching guide and summarize its main recommendation.
Adapt a modern pattern
Find guidance for [feature]. Adapt the recommended pattern to [framework] while preserving accessibility and browser support.
Review an implementation
Retrieve guidance relevant to [component]. Review the current implementation and list specific changes, fallbacks, and compatibility concerns.
Design a progressive strategy
Research guidance for [advanced browser feature]. Propose a production approach with feature detection, fallback behavior, performance checks, and security constraints.
Mejores prácticas
- Search with a specific action and interface outcome.
- Retrieve only the guides relevant to the current task.
- Verify browser support, accessibility, and fallback behavior before finalizing code.
Evitar
- Do not apply every related guide without checking project requirements.
- Do not treat experimental browser features as universally supported.
- Do not copy remote dependency examples without pinning and reviewing them.
Preguntas frecuentes
What topics does this skill cover?
It covers modern HTML, CSS, JavaScript, forms, accessibility, performance, privacy, security, visual design, and browser APIs.
Does it generate complete applications?
No. It retrieves focused guidance that an agent applies within your existing project and requirements.
Does it support React, Vue, or Angular?
Yes. The guidance is framework-agnostic and can be adapted to those frameworks.
Does it include browser compatibility advice?
Yes. Guides identify support status and recommend fallbacks or progressive enhancement when needed.
Does it require network access?
Yes. Its documented search and retrieval workflow runs a package that requires network access.
Can it replace project-specific testing?
No. Test recommendations against your supported browsers, devices, framework, accessibility requirements, and security policy.
Detalles del desarrollador
Autor
googlechromeLicencia
MIT
Revisión de Skillstore
r1
Aviso de versión
El autor no declaró una versión.
Ref.
2aa351cb09c29b7287d263bd8ea81e9bee3b2a61
Actualidad del mantenimiento
30/9/2026
Uso
0 descargas · 0 vistas
Estructura de archivos
📁 guides/
📄 accessible-error-announcement.md
📁 css/
📄 animate-to-intrinsic-sizes.md
📄 calculate-with-intrinsic-sizes.md
📄 child-state-based-styling.md
📄 css.md
📄 individual-transform-properties.md
📄 overflow-clipping-control.md
📄 usage-aware-component-variations.md
📁 forms/
📄 autofill-highlight-inputs.md
📄 custom-select-picker-layouts.md
📄 form-fields-automatically-fit-contents.md
📄 forms.md
📄 validate-input-after-interaction.md
📁 html/
📄 html.md
📁 js/
📄 calculate-event-differentials.md
📄 capture-location-agnostic-data.md
📄 format-human-readable-durations.md
📄 manage-recurring-intervals.md
📄 model-partial-time-concepts.md
📄 support-global-calendar-systems.md
📄 calculate-total-foreground-time.md
📄 conditional-async-dependencies.md
📄 defer-rendering-heavy-content.md
📄 defer-work-until-scroll-ends.md
📄 deliver-optimized-decorative-images.md
📄 deprioritize-background-fetches.md
📄 detect-initial-visibility-state.md
📄 efficient-background-processing.md
📄 faster-spa-view-transitions.md
📄 flicker-free-client-side-ab-testing.md
📄 improve-next-page-load-performance.md
📄 interactions-in-complex-layouts.md
📄 optimize-preload-priority.md
📄 out-of-order-html-streaming.md
📄 resolution-optimized-pseudo-elements.md
📄 schedule-tasks-by-priority.md
📄 sequence-distributed-events.md
📁 privacy/
📄 passkey-conditional-create.md
📄 component-specific-light-dark-theme.md
📄 resilient-context-menus-and-nested-dropdowns.md
📄 scroll-position-aware-elements.md
📄 scroll-progress-indicator.md
📄 scrollability-affordance-hints.md
📄 shrinking-header-on-scroll.md
📄 state-aware-sticky-headers.md
📄 anchor-positioning-tab-underline.md
📄 animate-element-entry-exit.md
📄 animate-to-from-top-layer.md
📄 consistent-cross-document-transitions.md
📄 cross-document-transitions.md
📄 declarative-dialog-popover-control.md
📄 directional-navigation-transitions.md
📄 dynamic-sibling-animations.md
📄 group-element-transitions.md
📄 interactive-content-reveal.md
📄 interest-triggered-action-previews.md
📄 interest-triggered-tooltips.md
📄 move-dom-element-without-losing-state.md
📄 platform-controls-dismiss-dialog.md
📄 same-document-transitions.md
📄 scroll-entry-exit-effects.md
📄 scroll-snap-realtime-feedback.md
📄 persistent-toast-notifications.md
📄 adapt-scrollbar-to-contrast-preferences.md
📄 customize-scrollbar-color-and-thickness.md
📄 export-html-media-from-canvas.md
📄 expose-canvas-content-to-browser-features.md
📄 improve-text-layout-and-legibility.md
📄 interactive-content-in-3d-scenes.md
📄 visually-stable-font-fallbacks.md
📄 visually-stable-mixed-fonts.md
📁 webmcp/
📄 SKILL.md