How do I install the Node Best Practices Foundation skill?

Run npx skillmds@latest add ryan-brosas/node-best-practices-foundation in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Node Best Practices Foundation safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Node Best Practices Foundation?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Node Best Practices Foundation free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Node Best Practices Foundation?

ryan-brosas (@ryan-brosas) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Node Best Practices Foundation by ryan-brosas

Name: Node Best Practices Foundation
Author: ryan-brosas

Node Best Practices Foundation

Use when porting Node.js production practice contracts: error-handling and crash predicates, project structure, testing patterns, Docker/ops choreography, and the security plane (headers, sessions, password KDFs, JWT revocation, injection/ReDoS guards, brute-force limiters, secret hygiene, sandbox ladders, OWASP checklist).

ryan-brosas 5a1de79 64 files · 210.7 KB Updated Sep 17, 2026

File contents

Node.js Best Practices Foundation

Foundation contract

This is a cold, source-specific foundation, not an operational procedure. It is historical, revision-pinned evidence rather than timeless guidance. Current project source, tests, requirements, and runtime behavior outrank this projection and decide what ships.

Provenance and revision

Source record: node-best-practices; portable upstream identity, license, coverage caveats, and retrieval history are preserved in the index.
Recorded revision: master@dc3d60c29d5483d9ea99cf261bbd6203516a2ba7.
Full provenance, coverage caveats, boundaries, and preserved evidence: references/index.md.

Topic map

Representative topics: Error handling; Structure & testing; Runtime & ops; Web surface security; Crypto & identity; Injection & execution safety; Traffic & dependency hardening; Hygiene & governance.
Scope and retrieval questions: references/index.md#use-this-for.
Complete capsule chooser: references/index.md#load-the-matching-source-dump.
Detailed grouped map: references/index.md#capsule-map.
Source limitations and portability boundaries: references/index.md#boundaries.

Retrieval

Open the index, choose one capsule matching the active question, and load only that capsule. Revalidate its cited source and revision before relying on it. Do not bulk-load the inventory, treat historical claims as current truth, or apply this foundation as a procedure.

Frequently asked questions