check-my-dev-in-web — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited check-my-dev-in-web (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Cheap signals first. Heavy browser last.
Use this skill when a user wants to know whether a web app, preview deployment, or local build is actually healthy without wasting time on full browser automation too early.
This skill is designed for cases like:
It is not the right tool for:
In those cases use a browser-heavy skill only after this fast lane is exhausted.
These are the core practices this skill follows:
200.webhint against a local server for standards, broken links, headers, manifest, viewport, and related web issues.200, but runtime render is still blank.Always execute in this order.
git status
git diff --stattest -f package.json && node -e "const p=require('./package.json'); console.log(JSON.stringify({name:p.name,scripts:p.scripts},null,2))"lsp_diagnostics on the project root or relevant source directory.Run the cheapest project-native checks that exist.
Typical order:
npm run lint
npm run typecheck
npm run buildRules:
build fails, stop here and fix the build before any browser work.Serve the built output or preview server and verify plain HTTP behavior.
For static dist/:
python3 -m http.server 4173 --directory distFor framework preview:
npm run preview -- --host 127.0.0.1 --port 4173Then run the smoke script:
python3 "$HOME/.config/opencode/skills/check-my-dev-in-web/scripts/check_my_dev_in_web.py" \
--url http://127.0.0.1:4173 \
--route / \
--route /aboutWhat this proves:
webhint)If the project is publicly reachable locally and Node is available:
npx hint http://127.0.0.1:4173Use this when you need fast checks for:
webhint is ideal here because it is faster and more structured than jumping straight into a full browser-debug session.
Once the page actually boots, use Lighthouse for scored audits.
For static output:
npx @lhci/cli autorun --collect.staticDistDir=./distFor a running local server:
npx @lhci/cli autorun --collect.url=http://127.0.0.1:4173/Recommended assertions:
Only escalate when all of the following are true:
200Then inspect runtime errors with the cheapest viable browser/devtools path.
Do not start here.
Use this order:
200?200?Use this order:
curl -I and curl -LPrefer:
Never do these first:
/assets/*.js returns 200These commands cover most cases fast.
npm run buildpython3 -m http.server 4173 --directory distpython3 "$HOME/.config/opencode/skills/check-my-dev-in-web/scripts/check_my_dev_in_web.py" \
--url http://127.0.0.1:4173 \
--route / \
--route /pricing \
--route /docsnpx hint http://127.0.0.1:4173npx @lhci/cli autorun --collect.url=http://127.0.0.1:4173/When using this skill, report results in this structure:
## check-my-dev-in-web result
### Phase 1 — Build
- PASS/FAIL
- command:
- key output:
### Phase 2 — HTTP smoke
- PASS/WARN/FAIL
- HTML status:
- assets checked:
- broken assets:
- routes checked:
### Phase 3 — webhint
- PASS/WARN/FAIL
- top findings:
### Phase 4 — Lighthouse
- PASS/WARN/FAIL
- performance:
- accessibility:
- best-practices:
- seo:
### Escalation
- was browser debugging needed?
- if yes, why cheaper checks were insufficient
### Verdict
- READY / NOT READY / NEEDS FIXES~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.