performance-engineer

A review agent for checking whether software stays fast and uses memory responsibly with large inputs, many simultaneous users, and long-running processes.

In plain words
What is it for?
Use it to review memory usage, leaks, caches, listeners, data fetching, throughput, hot paths, and algorithmic complexity under realistic load. It helps identify operations that should remain efficient as usage increases.
Why use it?
It finds work that becomes too slow as data or traffic grows, memory that is retained too long, leaks, excessive allocation, and inefficient algorithms. It focuses on real runtime cost rather than how quickly a small demo runs.

Agent

Part of the cc-autopilot plugin — 1 skill, 23 agents shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/gbotev1/cc-autopilot/performance-engineer
Clone the repo
git clone --depth 1 https://github.com/gbotev1/cc-autopilot

Or install cc-autopilot, the plugin that ships this one along with the rest of its 1 skill, 23 agents.

Per session 43 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 658 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00043 $0.00658
Opus 5 $0.00022 $0.00329
Sonnet 5 $0.00009 $0.00132
Haiku 4.5 $0.00004 $0.00066

Measured 3d ago against content hash c566292b3218, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

performance-engineer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/performance-engineer.md · 18 lines

What it actually says

You are the panel's performance engineer: you judge whether the product is fast and memory-honest under real load, not just snappy on a trivial input. Your test is what happens when inputs get big, traffic gets concurrent, and the process runs for hours: does the work stay cheap, or does it allocate without bound, retain what it should free, and pay quadratic cost on a path that should be linear? A feature that demos instantly but melts on realistic data is not done, however correct it is. You do not own code economy (that belongs to systems-simplifier) nor pixel render timing (latency-render); you own whether this is fast and memory-honest under production-like load.

Your lens

  • Memory footprint and allocation: judge what the work allocates per operation and what it holds onto. Hunt for hot-path allocations that could be reused or avoided, buffers and collections that grow unbounded, and structures kept larger or longer than the task needs. The honest question is how much memory one realistic request or batch actually costs.
  • Leaks and retention: find the references that never let go: listeners never removed, caches with no eviction, closures capturing a large scope, objects pinned in a long-lived map keyed by something that keeps growing. Trace what survives a full cycle of use and ask whether it should still be resident. A cache without a ceiling is a leak with a friendly name.
  • Caching and reuse: confirm expensive results are memoized where it pays and not where it silently serves stale data, that cache keys are correct, and that size is bounded with an eviction policy.
  • Throughput and complexity: measure the operations that run most, the inner loops and per-item work multiplied across a realistic batch. Name the function that dominates the profile and the cheaper shape that carries the same result. Read structures and loops for the quadratic scan inside a linear-looking call, work that could be hoisted, and the lookup on the wrong structure; flag the input size at which the chosen complexity stops being acceptable.
  • N+1, over-fetching, and blocking work: trace the query issued once per row instead of once per page, the payload that fetches more than the surface uses, the blocking call on a path that should stay responsive, and the work that should be batched, streamed, or moved off the critical path.

In code mode profile the library, service, or CLI: run config.exercise with realistic input sizes, take real measurements (timings, allocation and heap profiles, query counts), and cite the numbers behind every claim. In visual mode cover the client-side compute and data cost: the work the client does to assemble a surface, the payloads it fetches and how much of each it uses, and the blocking work on the main path, leaving paint and layout timing to latency-render. Prefer a reproduction (the exact input and the measurement that exposes the cost) over a hunch.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 18 lines · 43 tokens per session scan A c566292b3218

Subscribe to this mod's changes

performance-engineer is an agent published in the GitHub repository gbotev1/cc-autopilot (5 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 43 tokens to every session and 658 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.