Habilidades modern-web-guidance
📦
modern-web-guidance
Revisão do conteúdo r1 Risco alto ⚙️ Comandos externos🌐 Acesso à rede⚡ Contém scripts📁 Acesso ao sistema de arquivos
Build with Modern Web Standards
Frontend guidance becomes outdated as browser APIs and support levels change. This skill finds focused implementation guides with compatibility and fallback advice.
Suporta: Claude Codex Code(CC)
Pare e solicite confirmação antes de instalar.
Revise o plano e obtenha o consentimento explícito do usuário antes de alterar arquivos.
Instalar com meu Agente
Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.
Solicitação do agente
Review the Skillstore skill "modern-web-guidance" from https://skillstore.io/skills/googlechrome-modern-web-guidance.md and its manifest at https://skillstore.io/api/skills/googlechrome-modern-web-guidance/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.
Recursos legíveis por agentes
Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.
Testar
Usando "modern-web-guidance". Find the recommended way to build an accessible modal dialog.
Resultado esperado:
A focused guide selection with native dialog guidance, keyboard behavior, focus handling, dismissal rules, and fallback notes.
Usando "modern-web-guidance". Review image loading for the main page banner.
Resultado esperado:
A prioritized checklist covering loading priority, dimensions, responsive sources, decoding, and Largest Contentful Paint impact.
Usando "modern-web-guidance". Plan a view transition that works in older browsers.
Resultado esperado:
A progressive enhancement plan with support checks, a functional nonanimated path, reduced-motion handling, and test considerations.
Auditoria de segurança
Risco altov1 • 22/09/2026 Abrir o relatório versionado
Most static alerts are lexical false positives from Markdown, JavaScript syntax, keyboard events, and ordinary web terminology. Confirmed concerns include mandatory unpinned package execution, unversioned CDN code imports, one insecure HTTP script example, shared temporary cache use, and one unsafe innerHTML interpolation. Static review was capped at 400/620 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
148
Arquivos analisados
22,440
Linhas analisadas
56
Itens de revisão
0
Falsos positivos ignorados
Preocupações de segurança confirmadas (1)
Alto
Mandatory Unpinned Package Execution
The skill directs agents to run modern-web-guidance@latest before frontend work and requests network approval plus a wildcard command allowlist. A mutable package release can execute without review.
The cited instructions explicitly mandate npx execution of an @latest package and request network-enabled wildcard allowlisting.
Itens de revisão de capacidade (56)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import("https://esm.sh/@js-temporal/polyfill");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import('https://esm.sh/@js-temporal/polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
const module = await import('https://esm.sh/@js-temporal/polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import('https://unpkg.com/webauthn-polyfills');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import("https://unpkg.com/@oddbird/css-anchor-positioning");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import('https://esm.run/invokers-polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import('https://esm.run/invokers-polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import('https://esm.run/invokers-polyfill');
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import("https://unpkg.com/interestfor@latest");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import("https://unpkg.com/interestfor@latest");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import("https://unpkg.com/@oddbird/css-anchor-positioning");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://cdn.jsdelivr.net/npm/motion@latest/dist/motion.js").then(({ animate, spring }) => {
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
await import("https://unpkg.com/@oddbird/css-anchor-positioning");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Dynamic import() expression
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The example imports executable JavaScript directly from an unversioned third-party CDN. Mutable upstream content can execute compromised code in the consuming page.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import("https://esm.sh/@js-temporal/polyfill");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import('https://esm.sh/@js-temporal/polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
script.src = 'https://unpkg.com/scheduler-polyfill';
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
const module = await import('https://esm.sh/@js-temporal/polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
await import('https://unpkg.com/webauthn-polyfills');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
await import('https://esm.run/invokers-polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import('https://esm.run/invokers-polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
await import('https://esm.run/invokers-polyfill');
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
await import("https://unpkg.com/interestfor@latest");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
await import("https://unpkg.com/interestfor@latest");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://cdn.jsdelivr.net/npm/motion@latest/dist/motion.js").then(({ animate, spring }) => {
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
import("https://unpkg.com/@oddbird/popover-polyfill@latest/dist/popover.min.js");
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/three-html-render/dist/polyfill.js"></script>
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/three-html-render/dist/polyfill.js"></script>
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Alto
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/three-html-render/dist/polyfill.js"></script>
The URL loads executable JavaScript from an unversioned third-party CDN. Without an immutable version and integrity control, upstream changes become page code.
Médio
innerHTML assignment (XSS risk)
container.innerHTML = `<iframe src="https://www.youtube-nocookie.com/embed/${videoId}?autoplay=1" al
The example interpolates a DOM dataset value into an innerHTML string without validation. A manipulated video ID could break the attribute context and inject markup.
Médio
Temp directory access
- In sandboxed environments where `~/.npm` is read-only or restricted, set `NPM_CONFIG_CACHE=/tmp/np
The guide recommends a fixed shared temporary path for executable package cache data. Pre-creation or cache reuse can create local tampering risk.
Médio
Hardcoded URL
<script defer src="http://www.example.com/third-party.js"></script>
The example loads a script over plain HTTP. On an HTTP page it permits network modification, and on an HTTPS page browsers block it as mixed content.
Fatores de risco
⚙️ Comandos externos (50)
guides/built-in-ai/language-detection.md:36-42 guides/built-in-ai/language-model.md:29-34 guides/built-in-ai/language-model.md:157-159 guides/built-in-ai/prompt-api.md:29-34 guides/built-in-ai/prompt-api.md:157-159 guides/built-in-ai/summarizer.md:48-54 guides/built-in-ai/translator.md:66-75 guides/built-in-ai/translator.md:90-100 guides/css/css.md:75-87 guides/css/design-token-reactivity.md:84-92 guides/forms/animated-select-picker.md:91-147 guides/forms/brand-consistent-forms.md:252-255 guides/js/calculate-event-differentials.md:43-44 guides/js/calculate-event-differentials.md:44-51 guides/js/coordinate-global-events.md:22-39 guides/js/coordinate-global-events.md:39-43 guides/js/coordinate-global-events.md:43-44 guides/js/format-human-readable-durations.md:82-83 guides/js/format-human-readable-durations.md:83-85 guides/js/format-human-readable-durations.md:85-87 guides/js/manage-recurring-intervals.md:24-30 guides/js/manage-recurring-intervals.md:30-39 guides/js/model-partial-time-concepts.md:29-31 guides/js/model-partial-time-concepts.md:60-61 guides/js/model-partial-time-concepts.md:61-62 guides/js/support-global-calendar-systems.md:39-43 guides/js/support-global-calendar-systems.md:43-44 guides/js/support-global-calendar-systems.md:44-45 guides/js/support-global-calendar-systems.md:45-49 guides/js/support-global-calendar-systems.md:49-56 guides/js/support-global-calendar-systems.md:56-64 guides/performance/batch-analytics-events.md:112-154 guides/performance/detect-initial-visibility-state.md:98-101 guides/performance/flicker-free-client-side-ab-testing.md:28 guides/performance/flicker-free-client-side-ab-testing.md:29-30 guides/performance/flicker-free-client-side-ab-testing.md:30-39 guides/performance/full-session-analytics.md:93-135 guides/performance/optimize-image-priority.md:27-55 guides/performance/out-of-order-html-streaming.md:84 guides/performance/sequence-distributed-events.md:44-47 guides/privacy/privacy.md:155-158 guides/security/sanitize-untrusted-html.md:17-24 guides/security/security.md:71-74 guides/security/security.md:74-75 guides/ui-atoms/carousel-slide-effects.md:73-78 guides/ui-atoms/carousel-slide-effects.md:99-106 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:20-24 guides/ui-atoms/scroll-progress-indicator.md:129-133 guides/ui-atoms/shrinking-header-on-scroll.md:123-126 guides/ui-atoms/state-aware-sticky-headers.md:131-137
🌐 Acesso à rede (50)
guides/built-in-ai/language-detection.md:66 guides/built-in-ai/summarizer.md:129 guides/built-in-ai/translator.md:159 guides/forms/forms.md:234 guides/html/html.md:96 guides/js/calculate-event-differentials.md:78 guides/js/capture-location-agnostic-data.md:56 guides/js/coordinate-global-events.md:67 guides/js/format-human-readable-durations.md:52 guides/js/manage-recurring-intervals.md:61 guides/js/model-partial-time-concepts.md:89 guides/js/stabilize-reactive-state.md:65 guides/js/support-global-calendar-systems.md:99 guides/performance/batch-analytics-events.md:118 guides/performance/deprioritize-background-fetches.md:14 guides/performance/deprioritize-background-fetches.md:17 guides/performance/flicker-free-client-side-ab-testing.md:73 guides/performance/flicker-free-client-side-ab-testing.md:34 guides/performance/flicker-free-client-side-ab-testing.md:54 guides/performance/flicker-free-client-side-ab-testing.md:122 guides/performance/full-session-analytics.md:99 guides/performance/out-of-order-html-streaming.md:77 guides/performance/performance.md:145 guides/performance/performance.md:230 guides/performance/schedule-tasks-by-priority.md:45 guides/performance/sequence-distributed-events.md:69 guides/privacy/privacy.md:139 guides/privacy/privacy.md:148 guides/privacy/privacy.md:155 guides/privacy/privacy.md:166 guides/security/passkey-management.md:142 guides/security/passkey-management.md:206 guides/security/passkey-reauthentication.md:62 guides/security/passkey-reauthentication.md:77 guides/security/security.md:269 guides/security/security.md:99 guides/security/security.md:111 guides/security/security.md:119 guides/security/security.md:149 guides/security/security.md:208 guides/security/security.md:214 guides/security/security.md:322 guides/security/security.md:331 guides/security/security.md:342 guides/ui-atoms/position-aware-tooltips.md:143 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:88 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:115 guides/ui-behaviors/animate-to-from-top-layer.md:152 guides/ui-behaviors/custom-button-actions.md:102 guides/ui-behaviors/declarative-dialog-popover-control.md:94
⚡ Contém scripts (49)
guides/js/calculate-event-differentials.md:78 guides/js/calculate-event-differentials.md:58 guides/js/capture-location-agnostic-data.md:56 guides/js/capture-location-agnostic-data.md:37 guides/js/coordinate-global-events.md:67 guides/js/format-human-readable-durations.md:52 guides/js/manage-recurring-intervals.md:61 guides/js/model-partial-time-concepts.md:89 guides/js/stabilize-reactive-state.md:65 guides/js/stabilize-reactive-state.md:12 guides/js/support-global-calendar-systems.md:99 guides/js/support-global-calendar-systems.md:49 guides/performance/conditional-async-dependencies.md:22 guides/performance/conditional-async-dependencies.md:72 guides/performance/performance.md:356 guides/performance/performance.md:368 guides/performance/sequence-distributed-events.md:69 guides/privacy/privacy.md:155 guides/security/passkey-management.md:206 guides/security/sanitize-untrusted-html.md:84 guides/security/security.md:71 guides/security/security.md:236 guides/ui-atoms/position-aware-tooltips.md:134 guides/ui-atoms/position-aware-tooltips.md:143 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:79 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:88 guides/ui-atoms/resilient-context-menus-and-nested-dropdowns.md:115 guides/ui-behaviors/animate-to-from-top-layer.md:143 guides/ui-behaviors/animate-to-from-top-layer.md:152 guides/ui-behaviors/custom-button-actions.md:102 guides/ui-behaviors/declarative-dialog-popover-control.md:82 guides/ui-behaviors/declarative-dialog-popover-control.md:94 guides/ui-behaviors/declarative-dialog-popover-control.md:123 guides/ui-behaviors/declarative-dialog-popover-control.md:210 guides/ui-behaviors/declarative-dialog-popover-control.md:219 guides/ui-behaviors/interest-triggered-action-previews.md:62 guides/ui-behaviors/interest-triggered-tooltips.md:86 guides/ui-behaviors/interest-triggered-tooltips.md:105 guides/ui-behaviors/interest-triggered-tooltips.md:114 guides/ui-behaviors/interest-triggered-tooltips.md:145 guides/ui-behaviors/physics-based-easing.md:102 guides/ui-components/persistent-app-tours.md:71 guides/ui-components/persistent-app-tours.md:80 guides/ui-components/persistent-app-tours.md:109 guides/ui-components/persistent-toast-notifications.md:30 guides/ui-components/persistent-toast-notifications.md:39 guides/ui-components/stack-drill-down.md:253 guides/ui-components/stack-drill-down.md:269 guides/visual-design/interactive-content-in-3d-scenes.md:328
📁 Acesso ao sistema de arquivos (3)
Auditado por: codex
Compartilhar e citar este relatório
Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.
Copiar link do relatório
https://skillstore.io/skills/googlechrome-modern-web-guidance/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/googlechrome-modern-web-guidance?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/googlechrome-modern-web-guidance?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/googlechrome-modern-web-guidance/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Cartão incorporável
<iframe src="https://skillstore.io/embed/skills/googlechrome-modern-web-guidance.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citações acadêmicas (APA · BibTeX · CFF)
Citação APA
googlechrome. (2026). modern-web-guidance security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/googlechrome-modern-web-guidance/audits/1Citação BibTeX
@techreport{googlechrome-googlechrome-modern-web-guidance-2026,
author = {googlechrome},
title = {modern-web-guidance security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/googlechrome-modern-web-guidance/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "modern-web-guidance security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "googlechrome"
date-released: "2026-09-22"
url: "https://skillstore.io/skills/googlechrome-modern-web-guidance/audits/1"
identifiers:
- type: other
value: "skillstore:googlechrome-modern-web-guidance:audit:1"
description: "Skillstore immutable audit report identifier"
Pontuação do Skillstore
Por que esta pontuação Confiança das evidências: Médio 55
Arquitetura
85
Manutenibilidade
87
Conteúdo
65
Comunidade
91
Conformidade com a especificação
O que você pode criar
Implement a frontend feature
Find a current browser-native pattern before building a component or interaction.
Review web quality
Check an existing interface for accessibility, performance, privacy, and security guidance.
Plan progressive enhancement
Compare browser support and select practical fallbacks for a product requirement.
Teste estes prompts
Find a relevant guide
Search for guidance on [frontend task]. Return the best matching guide and summarize its main recommendation.
Adapt a modern pattern
Find guidance for [feature]. Adapt the recommended pattern to [framework] while preserving accessibility and browser support.
Review an implementation
Retrieve guidance relevant to [component]. Review the current implementation and list specific changes, fallbacks, and compatibility concerns.
Design a progressive strategy
Research guidance for [advanced browser feature]. Propose a production approach with feature detection, fallback behavior, performance checks, and security constraints.
Boas práticas
- Search with a specific action and interface outcome.
- Retrieve only the guides relevant to the current task.
- Verify browser support, accessibility, and fallback behavior before finalizing code.
Evitar
- Do not apply every related guide without checking project requirements.
- Do not treat experimental browser features as universally supported.
- Do not copy remote dependency examples without pinning and reviewing them.
Perguntas frequentes
What topics does this skill cover?
It covers modern HTML, CSS, JavaScript, forms, accessibility, performance, privacy, security, visual design, and browser APIs.
Does it generate complete applications?
No. It retrieves focused guidance that an agent applies within your existing project and requirements.
Does it support React, Vue, or Angular?
Yes. The guidance is framework-agnostic and can be adapted to those frameworks.
Does it include browser compatibility advice?
Yes. Guides identify support status and recommend fallbacks or progressive enhancement when needed.
Does it require network access?
Yes. Its documented search and retrieval workflow runs a package that requires network access.
Can it replace project-specific testing?
No. Test recommendations against your supported browsers, devices, framework, accessibility requirements, and security policy.
Detalhes do desenvolvedor
Autor
googlechromeLicença
MIT
Revisão da Skillstore
r1
Aviso de versão
O autor não declarou uma versão.
Referência
2aa351cb09c29b7287d263bd8ea81e9bee3b2a61
Atualidade da manutenção
30/09/2026
Uso
0 downloads · 0 visualizações
Estrutura de arquivos
📁 guides/
📄 accessible-error-announcement.md
📁 css/
📄 animate-to-intrinsic-sizes.md
📄 calculate-with-intrinsic-sizes.md
📄 child-state-based-styling.md
📄 css.md
📄 individual-transform-properties.md
📄 overflow-clipping-control.md
📄 usage-aware-component-variations.md
📁 forms/
📄 autofill-highlight-inputs.md
📄 custom-select-picker-layouts.md
📄 form-fields-automatically-fit-contents.md
📄 forms.md
📄 validate-input-after-interaction.md
📁 html/
📄 html.md
📁 js/
📄 calculate-event-differentials.md
📄 capture-location-agnostic-data.md
📄 format-human-readable-durations.md
📄 manage-recurring-intervals.md
📄 model-partial-time-concepts.md
📄 support-global-calendar-systems.md
📄 calculate-total-foreground-time.md
📄 conditional-async-dependencies.md
📄 defer-rendering-heavy-content.md
📄 defer-work-until-scroll-ends.md
📄 deliver-optimized-decorative-images.md
📄 deprioritize-background-fetches.md
📄 detect-initial-visibility-state.md
📄 efficient-background-processing.md
📄 faster-spa-view-transitions.md
📄 flicker-free-client-side-ab-testing.md
📄 improve-next-page-load-performance.md
📄 interactions-in-complex-layouts.md
📄 optimize-preload-priority.md
📄 out-of-order-html-streaming.md
📄 resolution-optimized-pseudo-elements.md
📄 schedule-tasks-by-priority.md
📄 sequence-distributed-events.md
📁 privacy/
📄 passkey-conditional-create.md
📄 component-specific-light-dark-theme.md
📄 resilient-context-menus-and-nested-dropdowns.md
📄 scroll-position-aware-elements.md
📄 scroll-progress-indicator.md
📄 scrollability-affordance-hints.md
📄 shrinking-header-on-scroll.md
📄 state-aware-sticky-headers.md
📄 anchor-positioning-tab-underline.md
📄 animate-element-entry-exit.md
📄 animate-to-from-top-layer.md
📄 consistent-cross-document-transitions.md
📄 cross-document-transitions.md
📄 declarative-dialog-popover-control.md
📄 directional-navigation-transitions.md
📄 dynamic-sibling-animations.md
📄 group-element-transitions.md
📄 interactive-content-reveal.md
📄 interest-triggered-action-previews.md
📄 interest-triggered-tooltips.md
📄 move-dom-element-without-losing-state.md
📄 platform-controls-dismiss-dialog.md
📄 same-document-transitions.md
📄 scroll-entry-exit-effects.md
📄 scroll-snap-realtime-feedback.md
📄 persistent-toast-notifications.md
📄 adapt-scrollbar-to-contrast-preferences.md
📄 customize-scrollbar-color-and-thickness.md
📄 export-html-media-from-canvas.md
📄 expose-canvas-content-to-browser-features.md
📄 improve-text-layout-and-legibility.md
📄 interactive-content-in-3d-scenes.md
📄 visually-stable-font-fallbacks.md
📄 visually-stable-mixed-fonts.md
📁 webmcp/
📄 SKILL.md