Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Use when reviewing security-sensitive web apps, SharedArrayBuffer usage, worker-heavy apps, editors, or measurement features that require cross-origin isolation. Check both headers and real browser behavior.
Use when reviewing scripts, client components, bundles, or runtime behavior related to Handle cross-origin requests securely. Inspect both source code and the browser execution path so fixes target the real bottleneck or bug.
Use when reviewing form components, API payloads, or client-side storage to identify fields that are collected but not consumed by a stated feature.
Use when reviewing a project's security posture, setting up CI pipelines, or responding to a reported vulnerability in a dependency.
Use when setting up a new project's production observability stack, reviewing incident response readiness, or investigating why errors are going undetected.
Use when reviewing public HTML forms (no authentication required to reach them) for bot and abuse protection mechanisms.
Use when reviewing HTML forms, fetch/XHR calls, and form action attributes to ensure data is submitted exclusively over HTTPS.
Use when auditing a site's internal and external links for protocol consistency, migrating a site from HTTP to HTTPS, or reviewing hardcoded URLs in a codebase that may use `http://` instead of `https://`.