スキル modern-web-guidance
📦
modern-web-guidance
コンテンツリビジョン r1 高リスク ⚙️ 外部コマンド🌐 ネットワークアクセス⚡ スクリプトを含む📁 ファイルシステムへのアクセス
Build with Modern Web Standards
Frontend guidance becomes outdated as browser APIs and support levels change. This skill finds focused implementation guides with compatibility and fallback advice.
対応: Claude Codex Code(CC)
インストール前に停止して確認を求めてください。
計画を確認し、ファイルを変更する前にユーザーの明示的な同意を得てください。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "modern-web-guidance" from https://skillstore.io/skills/googlechrome-modern-web-guidance.md and its manifest at https://skillstore.io/api/skills/googlechrome-modern-web-guidance/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「modern-web-guidance」を使用しています。 Find the recommended way to build an accessible modal dialog.
期待される結果:
A focused guide selection with native dialog guidance, keyboard behavior, focus handling, dismissal rules, and fallback notes.
「modern-web-guidance」を使用しています。 Review image loading for the main page banner.
期待される結果:
A prioritized checklist covering loading priority, dimensions, responsive sources, decoding, and Largest Contentful Paint impact.
「modern-web-guidance」を使用しています。 Plan a view transition that works in older browsers.
期待される結果:
A progressive enhancement plan with support checks, a functional nonanimated path, reduced-motion handling, and test considerations.
セキュリティ監査
高リスクv1 • 2026/9/22 バージョン別レポートを開く
Most static alerts are lexical false positives from Markdown, JavaScript syntax, keyboard events, and ordinary web terminology. Confirmed concerns include mandatory unpinned package execution, unversioned CDN code imports, one insecure HTTP script example, shared temporary cache use, and one unsafe innerHTML interpolation. Static review was capped at 400/620 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
148
スキャンされたファイル
22,440
解析済み行数
56
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (1)
高
Mandatory Unpinned Package Execution
The skill directs agents to run modern-web-guidance@latest before frontend work and requests network approval plus a wildcard command allowlist. A mutable package release can execute without review.
The cited instructions explicitly mandate npx execution of an @latest package and request network-enabled wildcard allowlisting.
機能レビュー項目 (56)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
高
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
const module = await import('https://esm.sh/@js-temporal/polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
const module = await import('https://esm.sh/@js-temporal/polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
await import('https://unpkg.com/webauthn-polyfills');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
await import("https://unpkg.com/@oddbird/css-anchor-positioning");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
await import('https://esm.run/invokers-polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
import('https://esm.run/invokers-polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
await import('https://esm.run/invokers-polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
await import("https://unpkg.com/interestfor@latest");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
await import("https://unpkg.com/interestfor@latest");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
await import("https://unpkg.com/@oddbird/css-anchor-positioning");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
import("https://cdn.jsdelivr.net/npm/motion@latest/dist/motion.js").then(({ animate, spring }) => {
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
await import("https://unpkg.com/@oddbird/css-anchor-positioning");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
高
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
const module = await import('https://esm.sh/@js-temporal/polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
script.src = 'https://unpkg.com/scheduler-polyfill';
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
const module = await import('https://esm.sh/@js-temporal/polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
await import('https://unpkg.com/webauthn-polyfills');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
await import('https://esm.run/invokers-polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
import('https://esm.run/invokers-polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
await import('https://esm.run/invokers-polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
await import("https://unpkg.com/interestfor@latest");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
await import("https://unpkg.com/interestfor@latest");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
import("https://cdn.jsdelivr.net/npm/motion@latest/dist/motion.js").then(({ animate, spring }) => {
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/three-html-render/dist/polyfill.js"></script>
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/three-html-render/dist/polyfill.js"></script>
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
高
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/three-html-render/dist/polyfill.js"></script>
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
中
innerHTML assignment (XSS risk)
container.innerHTML = `<iframe src="https://www.youtube-nocookie.com/embed/${videoId}?autoplay=1" al
The example interpolates a DOM dataset value into an innerHTML string without validation. A manipulated video ID could break the attribute context and inject markup.
中
Temp directory access
- In sandboxed environments where `~/.npm` is read-only or restricted, set `NPM_CONFIG_CACHE=/tmp/np
The guide recommends a fixed shared temporary path for executable package cache data. Pre-creation or cache reuse can create local tampering risk.
中
Hardcoded URL
<script defer src="http://www.example.com/third-party.js"></script>
The example loads a script over plain HTTP. On an HTTP page it permits network modification, and on an HTTPS page browsers block it as mixed content.
リスク要因
⚙️ 外部コマンド (50)
guides/built-in-ai/language-detection.md:36-42 guides/built-in-ai/language-model.md:29-34 guides/built-in-ai/language-model.md:157-159 guides/built-in-ai/prompt-api.md:29-34 guides/built-in-ai/prompt-api.md:157-159 guides/built-in-ai/summarizer.md:48-54 guides/built-in-ai/translator.md:66-75 guides/built-in-ai/translator.md:90-100 guides/css/css.md:75-87 guides/css/design-token-reactivity.md:84-92 guides/forms/animated-select-picker.md:91-147 guides/forms/brand-consistent-forms.md:252-255 guides/js/calculate-event-differentials.md:43-44 guides/js/calculate-event-differentials.md:44-51 guides/js/coordinate-global-events.md:22-39 guides/js/coordinate-global-events.md:39-43 guides/js/coordinate-global-events.md:43-44 guides/js/format-human-readable-durations.md:82-83 guides/js/format-human-readable-durations.md:83-85 guides/js/format-human-readable-durations.md:85-87 guides/js/manage-recurring-intervals.md:24-30 guides/js/manage-recurring-intervals.md:30-39 guides/js/model-partial-time-concepts.md:29-31 guides/js/model-partial-time-concepts.md:60-61 guides/js/model-partial-time-concepts.md:61-62 guides/js/support-global-calendar-systems.md:39-43 guides/js/support-global-calendar-systems.md:43-44 guides/js/support-global-calendar-systems.md:44-45 guides/js/support-global-calendar-systems.md:45-49 guides/js/support-global-calendar-systems.md:49-56 guides/js/support-global-calendar-systems.md:56-64 guides/performance/batch-analytics-events.md:112-154 guides/performance/detect-initial-visibility-state.md:98-101 guides/performance/flicker-free-client-side-ab-testing.md:28 guides/performance/flicker-free-client-side-ab-testing.md:29-30 guides/performance/flicker-free-client-side-ab-testing.md:30-39 guides/performance/full-session-analytics.md:93-135 guides/performance/optimize-image-priority.md:27-55 guides/performance/out-of-order-html-streaming.md:84 guides/performance/sequence-distributed-events.md:44-47 guides/privacy/privacy.md:155-158 guides/security/sanitize-untrusted-html.md:17-24 guides/security/security.md:71-74 guides/security/security.md:74-75 guides/ui-atoms/carousel-slide-effects.md:73-78 guides/ui-atoms/carousel-slide-effects.md:99-106 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:20-24 guides/ui-atoms/scroll-progress-indicator.md:129-133 guides/ui-atoms/shrinking-header-on-scroll.md:123-126 guides/ui-atoms/state-aware-sticky-headers.md:131-137
🌐 ネットワークアクセス (50)
guides/built-in-ai/language-detection.md:66 guides/built-in-ai/summarizer.md:129 guides/built-in-ai/translator.md:159 guides/forms/forms.md:234 guides/html/html.md:96 guides/js/calculate-event-differentials.md:78 guides/js/capture-location-agnostic-data.md:56 guides/js/coordinate-global-events.md:67 guides/js/format-human-readable-durations.md:52 guides/js/manage-recurring-intervals.md:61 guides/js/model-partial-time-concepts.md:89 guides/js/stabilize-reactive-state.md:65 guides/js/support-global-calendar-systems.md:99 guides/performance/batch-analytics-events.md:118 guides/performance/deprioritize-background-fetches.md:14 guides/performance/deprioritize-background-fetches.md:17 guides/performance/flicker-free-client-side-ab-testing.md:73 guides/performance/flicker-free-client-side-ab-testing.md:34 guides/performance/flicker-free-client-side-ab-testing.md:54 guides/performance/flicker-free-client-side-ab-testing.md:122 guides/performance/full-session-analytics.md:99 guides/performance/out-of-order-html-streaming.md:77 guides/performance/performance.md:145 guides/performance/performance.md:230 guides/performance/schedule-tasks-by-priority.md:45 guides/performance/sequence-distributed-events.md:69 guides/privacy/privacy.md:139 guides/privacy/privacy.md:148 guides/privacy/privacy.md:155 guides/privacy/privacy.md:166 guides/security/passkey-management.md:142 guides/security/passkey-management.md:206 guides/security/passkey-reauthentication.md:62 guides/security/passkey-reauthentication.md:77 guides/security/security.md:269 guides/security/security.md:99 guides/security/security.md:111 guides/security/security.md:119 guides/security/security.md:149 guides/security/security.md:208 guides/security/security.md:214 guides/security/security.md:322 guides/security/security.md:331 guides/security/security.md:342 guides/ui-atoms/position-aware-tooltips.md:143 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:88 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:115 guides/ui-behaviors/animate-to-from-top-layer.md:152 guides/ui-behaviors/custom-button-actions.md:102 guides/ui-behaviors/declarative-dialog-popover-control.md:94
⚡ スクリプトを含む (49)
guides/js/calculate-event-differentials.md:78 guides/js/calculate-event-differentials.md:58 guides/js/capture-location-agnostic-data.md:56 guides/js/capture-location-agnostic-data.md:37 guides/js/coordinate-global-events.md:67 guides/js/format-human-readable-durations.md:52 guides/js/manage-recurring-intervals.md:61 guides/js/model-partial-time-concepts.md:89 guides/js/stabilize-reactive-state.md:65 guides/js/stabilize-reactive-state.md:12 guides/js/support-global-calendar-systems.md:99 guides/js/support-global-calendar-systems.md:49 guides/performance/conditional-async-dependencies.md:22 guides/performance/conditional-async-dependencies.md:72 guides/performance/performance.md:356 guides/performance/performance.md:368 guides/performance/sequence-distributed-events.md:69 guides/privacy/privacy.md:155 guides/security/passkey-management.md:206 guides/security/sanitize-untrusted-html.md:84 guides/security/security.md:71 guides/security/security.md:236 guides/ui-atoms/position-aware-tooltips.md:134 guides/ui-atoms/position-aware-tooltips.md:143 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:79 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:88 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:115 guides/ui-behaviors/animate-to-from-top-layer.md:143 guides/ui-behaviors/animate-to-from-top-layer.md:152 guides/ui-behaviors/custom-button-actions.md:102 guides/ui-behaviors/declarative-dialog-popover-control.md:82 guides/ui-behaviors/declarative-dialog-popover-control.md:94 guides/ui-behaviors/declarative-dialog-popover-control.md:123 guides/ui-behaviors/declarative-dialog-popover-control.md:210 guides/ui-behaviors/declarative-dialog-popover-control.md:219 guides/ui-behaviors/interest-triggered-action-previews.md:62 guides/ui-behaviors/interest-triggered-tooltips.md:86 guides/ui-behaviors/interest-triggered-tooltips.md:105 guides/ui-behaviors/interest-triggered-tooltips.md:114 guides/ui-behaviors/interest-triggered-tooltips.md:145 guides/ui-behaviors/physics-based-easing.md:102 guides/ui-components/persistent-app-tours.md:71 guides/ui-components/persistent-app-tours.md:80 guides/ui-components/persistent-app-tours.md:109 guides/ui-components/persistent-toast-notifications.md:30 guides/ui-components/persistent-toast-notifications.md:39 guides/ui-components/stack-drill-down.md:253 guides/ui-components/stack-drill-down.md:269 guides/visual-design/interactive-content-in-3d-scenes.md:328
📁 ファイルシステムへのアクセス (3)
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/googlechrome-modern-web-guidance/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/googlechrome-modern-web-guidance?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/googlechrome-modern-web-guidance?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/googlechrome-modern-web-guidance/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/googlechrome-modern-web-guidance.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
googlechrome. (2026). modern-web-guidance security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/googlechrome-modern-web-guidance/audits/1BibTeX形式の引用
@techreport{googlechrome-googlechrome-modern-web-guidance-2026,
author = {googlechrome},
title = {modern-web-guidance security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/googlechrome-modern-web-guidance/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "modern-web-guidance security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "googlechrome"
date-released: "2026-09-22"
url: "https://skillstore.io/skills/googlechrome-modern-web-guidance/audits/1"
identifiers:
- type: other
value: "skillstore:googlechrome-modern-web-guidance:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
91
仕様準拠
作成できるもの
Implement a frontend feature
Find a current browser-native pattern before building a component or interaction.
Review web quality
Check an existing interface for accessibility, performance, privacy, and security guidance.
Plan progressive enhancement
Compare browser support and select practical fallbacks for a product requirement.
これらのプロンプトを試す
Find a relevant guide
Search for guidance on [frontend task]. Return the best matching guide and summarize its main recommendation.
Adapt a modern pattern
Find guidance for [feature]. Adapt the recommended pattern to [framework] while preserving accessibility and browser support.
Review an implementation
Retrieve guidance relevant to [component]. Review the current implementation and list specific changes, fallbacks, and compatibility concerns.
Design a progressive strategy
Research guidance for [advanced browser feature]. Propose a production approach with feature detection, fallback behavior, performance checks, and security constraints.
ベストプラクティス
- Search with a specific action and interface outcome.
- Retrieve only the guides relevant to the current task.
- Verify browser support, accessibility, and fallback behavior before finalizing code.
回避
- Do not apply every related guide without checking project requirements.
- Do not treat experimental browser features as universally supported.
- Do not copy remote dependency examples without pinning and reviewing them.
よくある質問
What topics does this skill cover?
It covers modern HTML, CSS, JavaScript, forms, accessibility, performance, privacy, security, visual design, and browser APIs.
Does it generate complete applications?
No. It retrieves focused guidance that an agent applies within your existing project and requirements.
Does it support React, Vue, or Angular?
Yes. The guidance is framework-agnostic and can be adapted to those frameworks.
Does it include browser compatibility advice?
Yes. Guides identify support status and recommend fallbacks or progressive enhancement when needed.
Does it require network access?
Yes. Its documented search and retrieval workflow runs a package that requires network access.
Can it replace project-specific testing?
No. Test recommendations against your supported browsers, devices, framework, accessibility requirements, and security policy.
開発者情報
作成者
googlechromeライセンス
MIT
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
参照
2aa351cb09c29b7287d263bd8ea81e9bee3b2a61
メンテナンスの新しさ
2026/9/30
利用状況
0 ダウンロード · 0 閲覧
ファイル構成
📁 guides/
📄 accessible-error-announcement.md
📁 css/
📄 animate-to-intrinsic-sizes.md
📄 calculate-with-intrinsic-sizes.md
📄 child-state-based-styling.md
📄 css.md
📄 individual-transform-properties.md
📄 overflow-clipping-control.md
📄 usage-aware-component-variations.md
📁 forms/
📄 autofill-highlight-inputs.md
📄 custom-select-picker-layouts.md
📄 form-fields-automatically-fit-contents.md
📄 forms.md
📄 validate-input-after-interaction.md
📁 html/
📄 html.md
📁 js/
📄 calculate-event-differentials.md
📄 capture-location-agnostic-data.md
📄 format-human-readable-durations.md
📄 manage-recurring-intervals.md
📄 model-partial-time-concepts.md
📄 support-global-calendar-systems.md
📄 calculate-total-foreground-time.md
📄 conditional-async-dependencies.md
📄 defer-rendering-heavy-content.md
📄 defer-work-until-scroll-ends.md
📄 deliver-optimized-decorative-images.md
📄 deprioritize-background-fetches.md
📄 detect-initial-visibility-state.md
📄 efficient-background-processing.md
📄 faster-spa-view-transitions.md
📄 flicker-free-client-side-ab-testing.md
📄 improve-next-page-load-performance.md
📄 interactions-in-complex-layouts.md
📄 optimize-preload-priority.md
📄 out-of-order-html-streaming.md
📄 resolution-optimized-pseudo-elements.md
📄 schedule-tasks-by-priority.md
📄 sequence-distributed-events.md
📁 privacy/
📄 passkey-conditional-create.md
📄 component-specific-light-dark-theme.md
📄 resilient-context-menus-and-nested-dropdowns.md
📄 scroll-position-aware-elements.md
📄 scroll-progress-indicator.md
📄 scrollability-affordance-hints.md
📄 shrinking-header-on-scroll.md
📄 state-aware-sticky-headers.md
📄 anchor-positioning-tab-underline.md
📄 animate-element-entry-exit.md
📄 animate-to-from-top-layer.md
📄 consistent-cross-document-transitions.md
📄 cross-document-transitions.md
📄 declarative-dialog-popover-control.md
📄 directional-navigation-transitions.md
📄 dynamic-sibling-animations.md
📄 group-element-transitions.md
📄 interactive-content-reveal.md
📄 interest-triggered-action-previews.md
📄 interest-triggered-tooltips.md
📄 move-dom-element-without-losing-state.md
📄 platform-controls-dismiss-dialog.md
📄 same-document-transitions.md
📄 scroll-entry-exit-effects.md
📄 scroll-snap-realtime-feedback.md
📄 persistent-toast-notifications.md
📄 adapt-scrollbar-to-contrast-preferences.md
📄 customize-scrollbar-color-and-thickness.md
📄 export-html-media-from-canvas.md
📄 expose-canvas-content-to-browser-features.md
📄 improve-text-layout-and-legibility.md
📄 interactive-content-in-3d-scenes.md
📄 visually-stable-font-fallbacks.md
📄 visually-stable-mixed-fonts.md
📁 webmcp/
📄 SKILL.md