Web Development
Build, debug, and deploy websites using HTML, CSS, JavaScript, and modern frameworks following production best practices.
MIT-0 · Free to use, modify, and redistribute. No attribution required.
⭐ 8 · 5.5k · 85 current installs · 90 all-time installs
byIván@ivangdavila
MIT-0
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (web development) matches content: HTML/CSS/JS/frameworks/deploy/performance docs. Required env/binaries/configs are none, which is coherent for a documentation-style skill.
Instruction Scope
All runtime instructions are guidance documents and checklists for building and deploying websites. They do not instruct the agent to read local files, access unrelated system state, exfiltrate data, or call unexpected external endpoints.
Install Mechanism
No install spec and no code files — the skill is instruction-only, so nothing is written to disk or downloaded during install.
Credentials
The skill requests no environment variables, keys, or config paths. Mentions of env-var patterns (e.g., NEXT_PUBLIC_*) are explanatory and appropriate to the topic.
Persistence & Privilege
Flags are default (not always-on). It does not request permanent presence or modify other skills/system settings.
Assessment
This is a documentation-style skill that appears to do what it claims and does not request credentials or install code. It's low-risk to install from a technical-surface perspective. Before installing, consider: (1) the source/owner is unknown — prefer skills from trusted publishers, (2) if you later ask the agent to run commands or deploy on your behalf, double-check any commands before executing them locally or in your infrastructure, and (3) keep an eye out for updates or a published homepage that provides provenance and versioning information.Like a lobster shell, security has layers — review code before you run it.
Current versionv1.0.0
Download ziplatest
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
SKILL.md
Quick Reference
| Need | See |
|---|---|
| HTML/CSS issues | html-css.md |
| JavaScript patterns | javascript.md |
| React/Next.js/frameworks | frameworks.md |
| Deploy to production | deploy.md |
| Performance/SEO/a11y | performance.md |
Critical Rules
- DOCTYPE matters — Missing
<!DOCTYPE html>triggers quirks mode; layouts break unpredictably - CSS specificity beats cascade —
.classoverrides element selectors regardless of order ===not==— Type coercion causes"0" == falseto be true- Async/await in loops —
forEachdoesn't await; usefor...oforPromise.all - CORS is server-side — No client-side fix; configure
Access-Control-Allow-Originon the server - Responsive = viewport meta — Without
<meta name="viewport">, mobile renders desktop-width - Form without
preventDefault— Page reloads; calle.preventDefault()in submit handler - Images need dimensions — Missing
width/heightcauses layout shift (CLS penalty) - HTTPS or blocked — Mixed content (HTTP resources on HTTPS pages) gets blocked by browsers
- Environment variables leak —
NEXT_PUBLIC_*exposes to client; never prefix secrets
Common Requests
"Make it responsive" → Mobile-first CSS with media queries; test at 320px, 768px, 1024px
"Deploy to production" → See deploy.md for Vercel/Netlify/VPS patterns
"Fix CORS error" → Server must send headers; proxy through same-origin if you can't control server
"Improve performance" → Lighthouse audit; focus on LCP, CLS, FID; lazy-load below-fold images
"Add SEO" → Title/description per page, semantic HTML, OG tags, sitemap.xml
Framework Decision Tree
- Static content, fast builds → Astro or plain HTML
- Blog/docs with MDX → Astro or Next.js App Router
- Interactive app with auth → Next.js or Remix
- Full SSR/ISR control → Next.js
- Simple SPA, no SEO needed → Vite + React/Vue
Files
6 totalSelect a file
Select a file to preview.
Comments
Loading comments…
