Навыки pwa-development
📦

pwa-development

Ревизия содержимого r1 Средний риск ⚡ Содержит скрипты⚙️ Внешние команды🌐 Доступ к сети🔑 Переменные окружения

Build Offline-Ready Progressive Web Apps

Web apps can fail on unreliable connections and lack a clear installation experience. This skill provides PWA implementation examples for manifests, service workers, caching, and offline workflows.

Поддерживает: Claude Codex Code(CC)
Maintain this Skill? Claim it 📊 62 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента
Review the Skillstore skill "pwa-development" from https://skillstore.io/skills/alinaqi-pwa-development.md and its manifest at https://skillstore.io/api/skills/alinaqi-pwa-development/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Протестировать

Использование «pwa-development». Plan installability for an existing Vite application.

Ожидаемый результат:

  • Define application names, launch URL, display mode, theme colors, and icon sizes.
  • Configure PWA integration and verify service worker registration over HTTPS.
  • Test installation and standalone launch on supported desktop and mobile browsers.

Использование «pwa-development». Recommend caching policies for a public content app with private account pages.

Ожидаемый результат:

  • Use cache-first delivery for versioned public assets with entry and age limits.
  • Use stale-while-revalidate for public articles when temporary staleness is acceptable.
  • Exclude private account responses and restrict cleanup to application-owned caches.
  • Test offline fallback behavior and service worker updates before release.

Аудит безопасности

Средний риск

All 92 static alerts are false positives for the reported threats, including Markdown backticks, fixed imports, routine requests, and misidentified identifiers. Two contextual risks remain: shared caches can retain private responses across sessions, and activation deletes unrelated caches on the same origin. No evidence found of prompt injection, credential theft, or malicious execution instructions.

1
Просканировано файлов
961
Проанализировано строк
0
Пункты проверки
0
Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Средний
Shared Response Caches Lack User Isolation
API and navigation examples store responses in shared caches without user partitioning or logout cleanup. Authenticated content can remain accessible after account changes or offline.
Both examples cache broad API or page responses without session isolation. Disclosure depends on deploying them with authenticated content, but no safeguards are shown.
Средний
Activation Deletes Unrelated Origin Caches
Activation deletes every cache whose name differs from CACHE_NAME. Cache Storage is shared by origin, so this can destroy other applications' offline data.
The filter excludes only the current cache name before deleting all others. No application prefix or ownership restriction protects unrelated caches.
Аудитор:: codex
Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет
Оценка безопасности

Копировать ссылку на отчёт

https://skillstore.io/skills/alinaqi-pwa-development/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/alinaqi-pwa-development/security.svg)](https://skillstore.io/skills/alinaqi-pwa-development?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/alinaqi-pwa-development?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/alinaqi-pwa-development/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/alinaqi-pwa-development.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Академические ссылки (APA · BibTeX · CFF)

Цитата APA

alinaqi. (2026). pwa-development security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/alinaqi-pwa-development/audits/1

Цитата BibTeX

@techreport{alinaqi-alinaqi-pwa-development-2026, author = {alinaqi}, title = {pwa-development security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/alinaqi-pwa-development/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "pwa-development security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "alinaqi" date-released: "2026-11-07" url: "https://skillstore.io/skills/alinaqi-pwa-development/audits/1" identifiers: - type: other value: "skillstore:alinaqi-pwa-development:audit:1" description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний
55
Архитектура
65
Сопровождаемость
87
Контент
65
Сообщество
57
Соответствие спецификации

Что вы можете построить

Add an Installable App Experience

Create a manifest, register a service worker, and add installation controls to an existing website.

Support Field Work Without Connectivity

Plan offline fallback pages and queued form submissions for teams working with unreliable connections.

Review PWA Release Readiness

Use the manifest, offline behavior, update, and performance checklists to organize browser testing.

Попробуйте эти промпты

Create a Basic Manifest
Create a web app manifest for [app name] at [start URL]. Include standalone display, theme colors, and required icon sizes.
Add Offline Fallbacks
Add service worker registration and an offline fallback to [project]. Cache public assets only and restrict cleanup to this application.
Configure Workbox Caching
Configure Workbox for [Vite project]. Choose strategies for public assets and API responses, set expiration limits, and exclude authenticated endpoints.
Design a Secure Offline Workflow
Design offline submissions for [workflow] using Workbox background sync. Address account changes, sensitive data retention, duplicate submissions, and update testing.

Лучшие практики

  • Choose cache strategies by resource sensitivity and freshness needs; exclude private responses unless isolation and retention controls are explicit.
  • Namespace application caches and remove only obsolete versions owned by the application.
  • Test installation, offline behavior, queued submissions, and updates across target browsers using current tooling.

Избегать

  • Copying broad API caching rules into authenticated applications without session isolation or logout cleanup.
  • Deleting every origin cache except the current cache during service worker activation.
  • Treating example framework commands or historical audit criteria as guaranteed current production guidance.

Часто задаваемые вопросы

What does this skill provide?
It provides PWA development guidance, implementation examples, framework configurations, and testing checklists.
Can I use it with Claude and Codex?
The skill supports Claude, Codex, and Claude Code.
Does it build and deploy an app automatically?
No. It supplies guidance and examples that must be adapted, implemented, tested, and deployed within your project.
Which frameworks are covered?
Examples cover Vite, Next.js, and Create React App. Verify package compatibility and maintenance status before adopting them.
Are the cache examples ready for private user data?
No. Add sensitive endpoint exclusions, user isolation, logout cleanup, and application-specific cache ownership before production use.
Will every PWA feature work in every browser?
No. Installation prompts, push notifications, background sync, and manifest extensions vary by browser and platform.

Сведения для разработчиков

Автор

alinaqi

Лицензия

Неизвестно

Ревизия Skillstore

r1

Примечание о версии

Автор не указал версию.

Ссылка

c993c6abcbffafea2683d7748b53b3dfaf438415

Актуальность поддержки

09.11.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md

Показать все
📦

web-games

78

Создавайте более качественные веб-игры

от sickn33

Браузерные игры требуют тщательного выбора движков, рендеринга, ресурсов, аудио и поддержки офлайн-режима. Этот навык помогает Claude, Codex и Claude Code планировать практичные архитектуры веб-игр.

Кодинг и разработка Просмотр
📦

brand-assets-setup

38

Настройка брендовых ресурсов Next.js

от JohnWayneeee

Команды Next.js часто упускают требования к favicon, PWA и изображениям для социальных карточек. Этот навык проверяет проект, подготавливает точные спецификации ресурсов и подключает сгенерированные файлы в соответствии с соглашениями App Router.

Дизайн и креатив Просмотр